krasnika^

РЕШЕН
Съмнение за инфектирана система

    18 мнения в тази тема


    Здравейте, бихте ли ми казали дали имам повод за притеснение. Клавиатурата ми и мишката отказват на моменти, което ме навежда на мисълта че е заразена машината. Работи бавно и ми дава на моменти син екран. Прилагам логовете:

    DDS:

     

    DDS (Ver_2011-09-30.01) - NTFS_x86 
    Internet Explorer: 8.0.6001.18702
    Run by MONI at 14:35:59 on 2013-05-11
    Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.894.97 [GMT 3:00]
    .
    AV: Avira Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
    .
    ============== Running Processes ================
    .
    C:WINDOWSExplorer.EXE
    C:WINDOWSsystem32spoolsv.exe
    C:Program FilesAviraAntiVir Desktopsched.exe
    C:Program FilesAviraAntiVir Desktopavguard.exe
    C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
    C:WINDOWSSystem32PAStiSvc.exe
    C:Program FilesTeamViewerVersion8TeamViewer_Service.exe
    C:Program FilesVIAVIAudioiHDADeckHDeck.exe
    C:Program FilesAviraAntiVir Desktopavgnt.exe
    C:Program FilesSkypePhoneSkype.exe
    C:WINDOWSsystem32ctfmon.exe
    C:Program FilesTeamViewerVersion8TeamViewer.exe
    C:Program FilesAviraAntiVir Desktopavshadow.exe
    C:Program FilesTeamViewerVersion8tv_w32.exe
    C:WINDOWSSystem32alg.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:Program FilesMozilla Firefoxfirefox.exe
    c:program filesteamviewerversion8TeamViewer_Desktop.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:WINDOWSsystem32wbemwmiprvse.exe
    C:WINDOWSsystem32svchost.exe -k DcomLaunch
    C:WINDOWSsystem32svchost.exe -k rpcss
    C:WINDOWSSystem32svchost.exe -k netsvcs
    C:WINDOWSsystem32svchost.exe -k NetworkService
    C:WINDOWSsystem32svchost.exe -k LocalService
    C:WINDOWSsystem32svchost.exe -k LocalService
    C:WINDOWSsystem32svchost.exe -k imgsvc
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www1.delta-search.com/?affID=119529&babsrc=HP_ss&mntrId=5C83002268826863
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll
    uRun: [skype] "c:program filesskypephoneSkype.exe" /minimized /regrun
    uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe
    mRun: [HDAudDeck] c:program filesviaviaudioihdadeckHDeck.exe 1
    mRun: [avgnt] "c:program filesaviraantivir desktopavgnt.exe" /min
    dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    uPolicies-Explorer: NoDriveAutoRun = dword:67108863
    uPolicies-Explorer: NoDrives = dword:0
    mPolicies-Explorer: NoDriveAutoRun = dword:67108863
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
    mPolicies-Explorer: NoDrives = dword:0
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
    mPolicies-Explorer: NoDriveAutoRun = dword:67108863
    IE: E&xport to Microsoft Excel - c:progra~1micros~2office11EXCEL.EXE/3000
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe
    TCP: NameServer = 89.215.233.2 89.215.246.40
    TCP: Interfaces{A48477B5-DFB6-4E66-93CA-3491DD09FD48} : DHCPNameServer = 89.215.233.2 89.215.246.40
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll
    SecurityProviders: SecurityProviders = msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll
    LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:program filesgooglechromeapplication26.0.1410.64installerchrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:documents and settingsmoniapplication datamozillafirefoxprofiles5w3wuf8l.default
    FF - plugin: c:documents and settingsall usersapplication datanexoneungmnpNxGameeu.dll
    FF - plugin: c:program filesadobereader 9.0readerairnppdf32.dll
    FF - plugin: c:program filesgoogleupdate1.3.21.145npGoogleUpdate3.dll
    FF - plugin: c:windowssystem32macromedflashNPSWF32_11_5_502_135.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: extensions.tuvaro.hpOld0 - 
    FF - user.js: extensions.tuvaro.tlbrSrchUrl - hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=main&toolbarid=base&u=5c8395d3000000000000002268826863&q=
    FF - user.js: extensions.tuvaro.id - 5c8395d3000000000000002268826863
    FF - user.js: extensions.tuvaro.appId - {2768469C-717B-401F-8532-C6D88BAE0339}
    FF - user.js: extensions.tuvaro.instlDay - 15812
    FF - user.js: extensions.tuvaro.vrsn - 1.8.17.1
    FF - user.js: extensions.tuvaro.vrsni - 1.8.17.1
    FF - user.js: extensions.tuvaro.vrsnTs - 1.8.17.114:03:46
    FF - user.js: extensions.tuvaro.prtnrId - tuvaro
    FF - user.js: extensions.tuvaro.prdct - tuvaro
    FF - user.js: extensions.tuvaro.aflt - orgnl
    FF - user.js: extensions.tuvaro.smplGrp - none
    FF - user.js: extensions.tuvaro.tlbrId - base
    FF - user.js: extensions.tuvaro.instlRef - 9e9471a2
    FF - user.js: extensions.tuvaro.dfltLng - 
    FF - user.js: extensions.tuvaro.excTlbr - false
    FF - user.js: extensions.tuvaro.ffxUnstlRst - false
    FF - user.js: extensions.tuvaro.admin - false
    FF - user.js: extensions.tuvaro.cam - 
    FF - user.js: extensions.tuvaro.autoRvrt - false
    FF - user.js: extensions.tuvaro.rvrt - false
    FF - user.js: extensions.tuvaro.hmpg - true
    FF - user.js: extensions.tuvaro.hmpgUrl - hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=homepage&toolbarid=base&u=5c8395d3000000000000002268826863
    FF - user.js: extensions.tuvaro.dfltSrch - true
    FF - user.js: extensions.tuvaro.srchPrvdr - Tuvaro
    FF - user.js: extensions.tuvaro.kw_url - hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=url&toolbarid=base&u=5c8395d3000000000000002268826863&q=
    FF - user.js: extensions.tuvaro.dnsErr - true
    FF - user.js: extensions.tuvaro.newTab - true
    FF - user.js: extensions.tuvaro.newTabUrl - chrome://tuvaro/content/new browser tab.html?source=9e9471a2&tbp=tab&u=5c8395d3000000000000002268826863
    FF - user.js: extensions.delta.tlbrSrchUrl - 
    FF - user.js: extensions.delta.id - 5c8395d3000000000000002268826863
    FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
    FF - user.js: extensions.delta.instlDay - 15812
    FF - user.js: extensions.delta.vrsn - 1.8.16.16
    FF - user.js: extensions.delta.vrsni - 1.8.16.16
    FF - user.js: extensions.delta.vrsnTs - 1.8.16.1614:06:01
    FF - user.js: extensions.delta.prtnrId - delta
    FF - user.js: extensions.delta.prdct - delta
    FF - user.js: extensions.delta.aflt - babsst
    FF - user.js: extensions.delta.smplGrp - none
    FF - user.js: extensions.delta.tlbrId - base
    FF - user.js: extensions.delta.instlRef - sst
    FF - user.js: extensions.delta.dfltLng - en
    FF - user.js: extensions.delta.excTlbr - false
    FF - user.js: extensions.delta.ffxUnstlRst - true
    FF - user.js: extensions.delta.admin - false
    FF - user.js: extensions.delta.autoRvrt - false
    FF - user.js: extensions.delta.rvrt - false
    FF - user.js: extensions.delta.newTab - false
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 mv61xxmm;mv61xxmm;c:windowssystem32driversmv61xxmm.sys [2012-7-12 13616]
    R0 mv64xxmm;mv64xxmm;c:windowssystem32driversmv64xxmm.sys [2012-7-12 5632]
    R0 mvxxmm;mvxxmm;c:windowssystem32driversmvxxmm.sys [2012-7-12 13616]
    R0 nvlegacy;nvlegacy;c:windowssystem32driversnvlegacy.sys [2012-7-12 100736]
    R1 avkmgr;avkmgr;c:windowssystem32driversavkmgr.sys [2013-1-6 37352]
    R2 AntiVirSchedulerService;Avira Scheduler;c:program filesaviraantivir desktopsched.exe [2013-1-6 86752]
    R2 AntiVirService;Avira Real-Time Protection;c:program filesaviraantivir desktopavguard.exe [2013-1-6 110816]
    R2 avgntflt;avgntflt;c:windowssystem32driversavgntflt.sys [2013-1-6 84744]
    R2 TeamViewer8;TeamViewer 8;c:program filesteamviewerversion8TeamViewer_Service.exe [2013-3-5 3574624]
    R3 MonitorFunction;Driver for Monitor;c:windowssystem32driversTVMonitor.sys [2013-2-3 13304]
    R3 PAC207;SoC PC-Camer@;c:windowssystem32driverspfc027.sys [2005-2-24 162176]
    R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:windowssystem32driversviahduaa.sys [2012-12-8 279680]
    S2 gupdate;Услуга на Google Актуализация (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2013-1-12 116648]
    S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2013-1-12 116648]
    S3 vtany;vtany;??c:windowsvtany.sys --> c:windowsvtany.sys [?]
    S3 xhunter1;xhunter1;??c:windowsxhunter1.sys --> c:windowsxhunter1.sys [?]
    S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-7-12 250808]
    S4 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-2-28 161384]
    .
    =============== Created Last 30 ================
    .
    2013-04-18 13:37:10 -------- d-----w- c:documents and settingsall usersapplication dataInterAction studios
    2013-04-17 15:58:18 -------- d-----w- c:windowssystem32appmgmt
    2013-04-17 11:05:32 -------- d-----w- c:documents and settingsmoniapplication dataBabylon
    2013-04-17 11:05:32 -------- d-----w- c:documents and settingsall usersapplication dataBabylon
    2013-04-17 11:03:19 -------- d--h--w- c:windowssystem32GroupPolicy
    2013-04-14 00:02:47 1072544 ----a-w- c:windowssystem32nvdrsdb1.bin
    2013-04-14 00:02:47 1072544 ----a-w- c:windowssystem32nvdrsdb0.bin
    2013-04-14 00:02:47 1 ----a-w- c:windowssystem32nvdrssel.bin
    2013-04-14 00:02:08 -------- d-----w- c:program filesNVIDIA Corporation
    2013-04-11 19:20:18 26520 ----a-w- c:program filesmozilla firefoxplugin-hang-ui.exe
    2013-04-11 19:20:01 96664 ----a-w- c:program filesmozilla firefoxwebapprt-stub.exe
    2013-04-11 19:20:01 19352 ----a-w- c:program filesmozilla firefoxxpcom.dll
    2013-04-11 19:20:01 18581400 ----a-w- c:program filesmozilla firefoxxul.dll
    2013-04-11 19:20:00 92056 ----a-w- c:program filesmozilla firefoxsmime3.dll
    2013-04-11 19:20:00 867000 ----a-w- c:program filesmozilla firefoxuninstallhelper.exe
    2013-04-11 19:20:00 272280 ----a-w- c:program filesmozilla firefoxupdater.exe
    2013-04-11 19:20:00 170232 ----a-w- c:program filesmozilla firefoxwebapp-uninstaller.exe
    2013-04-11 19:20:00 157080 ----a-w- c:program filesmozilla firefoxssl3.dll
    2013-04-11 19:20:00 152472 ----a-w- c:program filesmozilla firefoxsoftokn3.dll
    .
    ==================== Find3M  ====================
    .
    2013-03-27 15:22:35 84744 ----a-w- c:windowssystem32driversavgntflt.sys
    2013-03-27 15:22:35 37352 ----a-w- c:windowssystem32driversavkmgr.sys
    2013-03-08 08:35:47 293376 ----a-w- c:windowssystem32winsrv.dll
    2013-03-07 03:23:36 2070016 ----a-w- c:windowssystem32ntkrnlpa.exe
    2013-03-07 01:31:48 2193536 ----a-w- c:windowssystem32ntoskrnl.exe
    2013-03-02 02:05:19 920064 ----a-w- c:windowssystem32wininet.dll
    2013-03-02 02:05:18 43520 ----a-w- c:windowssystem32licmgr10.dll
    2013-03-02 02:05:18 1469440 ----a-w- c:windowssystem32inetcpl.cpl
    2013-03-02 01:31:30 1876224 ----a-w- c:windowssystem32win32k.sys
    2013-03-02 01:08:57 385024 ----a-w- c:windowssystem32html.iec
    2013-02-12 00:32:23 12928 ----a-w- c:windowssystem32driversusb8023.sys
    .
    ============= FINISH: 14:37:09,76 ===============
     
    Attach:
     
    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-09-30.01)
    .
    Microsoft Windows XP Professional
    Boot Device: DeviceHarddiskVolume1
    Install Date: 07.5.2005 г. 18:24:05
    System Uptime: 11.5.2013 г. 12:55:05 (2 hours ago)
    .
    Motherboard: FOXCONN |  | M61PMV
    Processor: AMD Sempron Processor LE-1200 | AMD Sempron Processor LE-1200 | 2109/201mhz
    .
    ==== Disk Partitions =========================
    .
    A: is Removable
    C: is FIXED (NTFS) - 68 GiB total, 59,224 GiB free.
    D: is FIXED (NTFS) - 165 GiB total, 146,672 GiB free.
    E: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    No restore point in system.
    .
    ==== Installed Programs ======================
    .
    µTorrent
    Пакет за езиков интерфейс на Windows
    Adobe Flash Player 11 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Reader 9.5.0 - Bulgarian
    Avira Free Antivirus
    CCleaner
    Chicken Invaders 3 Free Trial
    Compatibility Pack for the 2007 Office system
    Dekaron
    Diner Dash - Hometown Hero
    Google Chrome
    Google Update Helper
    K-Lite Codec Pack 8.4.0 (Standard)
    Microsoft Office 2003 Bulgarian User Interface Pack
    Microsoft Office File Validation Add-In
    Microsoft Office Professional Edition 2003
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
    Mozilla Firefox 20.0.1 (x86 bg)
    MSXML 4.0 SP3 Parser (KB2758694)
    Nero 7 Micro
    NVIDIA Drivers
    OnScreenKeys 5.0.48
    PC Camer@
    Platform
    REALTEK GbE & FE Ethernet PCI NIC Driver
    Realtek High Definition Audio Driver
    Security Update for Windows Internet Explorer 8 (KB2744842)
    Security Update for Windows Internet Explorer 8 (KB2761465)
    Security Update for Windows Internet Explorer 8 (KB2792100)
    Security Update for Windows Internet Explorer 8 (KB2797052)
    Security Update for Windows Internet Explorer 8 (KB2799329)
    Security Update for Windows Internet Explorer 8 (KB2809289)
    Security Update for Windows Internet Explorer 8 (KB2817183)
    Security Update for Windows XP (KB2808735)
    Security Update for Windows XP (KB2813170)
    Security Update for Windows XP (KB2820917)
    Skype™ 6.3
    TeamViewer 8
    The KMPlayer (remove only)
    VIA п»ї
    WebFldrs XP
    Winamp
    WinRAR 4.01 (32-битова версия)
    .
    ==== Event Viewer Messages From Past Week ========
    .
    07.5.2013 г. 13:16:53, error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.
    07.5.2013 г. 13:16:53, error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.
    07.5.2013 г. 13:16:53, error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.
    .
    ==== End Of File ===========================
     

    Благодаря  :)

     

    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

    Извинете за забавянето.

    Може ли да архивирате файловете от папката C:Windowsminidump и да ги качите на хост по-избор.

    Публикувайте линк за download в следващия си пост.

     

    Поздрави!

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

    Извинете за забавянето.

    Може ли да архивирате файловете от папката C:Windowsminidump и да ги качите на хост по-избор.

    Публикувайте линк за download в следващия си пост.

     

    Поздрави!

    Привет, ето линк към архива: http://dox.bg/files/dw?a=7813a0da6a

    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

     

    Прегледах дъмп файловете и всички се дължат на драйвъра на VIA за звука:

     

    Probably caused by : viahduaa.sys ( viahduaa+19e60 )

     

    Нека да видим каква е вашаха хардуерна конфигурация за да обновим драйвъра до последната му версия.

     

    Свалете програмата Публикувано изображениеHWiNFO32

    След успешна инсталация и стартиране, ще се появи следния прозорец:
    Публикувано изображение

    Натиснете Run.

    Изчакайте търпеливо. След това изберете Save Report и HTML формат и натиснете Browse.

    Посочете вашия десктоп и натиснете Next.

    Ще се появява се Report Filter, изберете Finish.

    Публикувано изображение

    На десктопа ще се появи HTML файл с име "User Name", където "User Name" е името на компютъра Ви (например файла от снимката се казва HOLLER-PC.HTM). Качете файла тук и публикувайте линка за download в следващия си пост.


    И един от дъмповете се дължи на следното:

     

    Probably caused by : memory_corruption

     

    За тестване на РАМ паметта може да опитате с Memtest86+ 4.20
    Разархивирайте архива и запишете ISO файла с Burnaware например за да се получи буутващ диск с опцията Burn Image

    Публикувано изображение
    След това направете от БИОС-а CD/DVD устройството да е първото стартиращо устройство и направете проверка на РАМ паметта.
    Ако теста е успешен не би трябвало да има грешки:

    Публикувано изображение

    За да сте напълно сигурни, че РАМ-а е ок е добре да оставите теста за през нощта за поне едно 8-10 часа и още по-добре извадете всички плочки и оставете само една и ги тествайте една по една.
    Ако бъдат открити грешки ще видите грешки в червен фон подобно на тези:
    Публикувано изображение

    3 души харесват това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Ето линка от стъпка 1: http://file.bg/c233164FmVLa


    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

    Чудя се дали направо не можете да си карате само на драйвъра на Реалтек за звука, защото имате два драйвъра:

     

    Realtek HDA Audio Drive
    VIA HDA Audio Drive

     

    На сайта на Foxconn драйвърите са доста стари - от 2009-та

     

    На сайта на VIA намерий два за вашия кодек: VIA VT1708B CE

     

    По-стара, но сертифицирана версия - 10.005D Dated: 25-Jul-2012

     

     

    и  по-нова версия (не сертифицирана, но едва ли ще е проблем) - 10.1200A Dated: 7-Nov-2012

     

    Пробвайте и двата и вижте дали сините екрани ще изчезнат. При възможност обновете и останалите драйвъри (но за предпочитане е да не използвате допълнителен софтуер, защото те често свалят погрешните драйвъри за дадена конфигфурация).

     

    Все пак тествайте и РАМ-а и после пишете как е положението.

     

    Също така да почистим и малко Adware и да проверим за активни гадинки:

     

     

     

    СТЪПКА 1

     

     

    Публикувано изображение Изтеглете и стартирайте програмата AdwCleaner (by Xplode).

    • [*]Затворете всички стартирани програми и браузъри [*]Кликнете два пъти върху
    adwcleaner.exe за да стартирате инструмента. [*]Този път маркирайте Delete [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s1].txt.

     

     

     

    СТЪПКА 2

     

     

     

    Публикувано изображение Моля изтеглете Junkware Removal Tool на вашия десктоп.


    • [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента
    JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

     

     

     

    СТЪПКА 3

     

     

    Публикувано изображение Изтеглете Malwarebytes' Anti-Malware

     

    • [*]Кликнете два пъти върху
    mbam-setup.exe, за да инсталирате програмата. [*]Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish. [*]Ако има намерени обновявания, тя ще ги изтегли и инсталира. [*]Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan. [*]Сканирането ще отнеме малко време, затова моля да бъдете търпеливи. [*]Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата. [*]Уверете се, че на всички редове има отметки, и кликнете на Remove Selected. [*]Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. [*]Прикачете този лог в следващия си коментар в темата.

    Забележка: Ако MalwareBytes'Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поискада рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

     

     

    СТЪПКА 4

     

     

    Публикувано изображение
    1) Изтеглете: ESET Online Scanner
    2) Стартирайте esetsmartinstaller_enu.exe
    3) Сложете отметка на YES, I accept the Terms of Use и изберете Start
    4) Скенерът ще започне да изтегля компонентите, които са му необходими.
    5) Уверете се, че има отметки на следните редове, включително и тези от менюто Advanced Settings:

    • [*]
    Scan archives [*]Scan for potentially unwanted applications [*]Scan for potentially unsafe applications [*]Enable Anti-Stealth technology

    Уверете се че, Remove found threats няма отметка!

    И накрая изберете Start

    6) Скенерът ще започне да изтегля последните дефиниции.
    7) След, като сканирането завърши изберете Finish.
    8) Отидете в: C:Program FilesESETESET Online Scanner.

    9) Прикачете лог с името log.txt файла в следващия си пост.

     

     

     

    СТЪПКА 5

     

     

     

    Публикувано изображение
    Изтеглете Security Check от screen317 от този линк или и го запаметете на вашия десктоп.

    • [*]Кликнете два пъти върху
    SecurityCheck.exe и следвайте инструкциите. [*]Накрая, автоматично ще се отвори текстов документ, наречен checkup.txt, моля прикачете го в следващия ви коментар в тази тема.

    2 души харесват това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    публикувано (редактирано)

    Здравейте, ето резултати: 

     

     

    П.С. Снимката е прекалено голяма за да я кача тук, затова ви пускам линк:  

    http://dox.bg/files/dw?a=a70a18da55

     

    AdwCleanerS2.txt

    checkup.txt

    JRT.txt

    log.txt

    Редактирано от krasnika^ (преглед на промените)
    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Липсва лога от MBAM и за съжаление снимката от Eset не върши работа, защото файловете са с криптирани имена, но щом не пазите лога (както ми писахте по Л.С.) нищо не можем да направим за да видим какво е изтрила програмата след първото стартиране. Втория лог от Есет е чист.

     

    Как е сега положението - обновихте ли драйвърите за звука и продължават ли проблемите заради които отворихте темата?

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    публикувано (редактирано)

    Прикачам липсващия лог. Появи се нов проблем с драйверите на звука - след инсталацията на новия драйвер ( без сертификата) не ми позволява да включа микрофона в предния панел. Машината се държи по - добре. Само да попитам: да махам ли инструментите които ползвахме ? И какво да правя с файловете под карантина ? Благодаря ви.

    mbam-log-2013-04-06 (11-36-38).txt

    Редактирано от krasnika^ (преглед на промените)
    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте, файловете на Eset Online Scaner-a и папката в която са инсталирани остана след указаната от вас деинсталация както и карантината на програмата. Компютъра е много "по - пъргав" ако мога така да се изразя. Справихме се успешно с драйверите, и вече всичко е наред. Засега няма сини екрани и едва ли ще има повече проблеми след вашата намеса, за което ви Благодаря :wors: . Проблемите са решени. Само ми укажете начин по който да премахна програмата Eset Online Scaner  безопасно. Поздрави и лека работа :)

    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    публикувано (редактирано)

    Явно прибързах със заключенията относно сините екрани. Днес пак се появи ето кода на грешката: 0x000000D1(0xEB0F6E60,0x00000002,0x00000008,0xEB0F6E60). Бихте ли ми казали от какво може да е ? При рестарт на системата и опит да се затвори доклада за грешка на Microsoft дава пак синя страница с този код:0x000000d1(0xEB161E60,0x00000002,0x00000000,0xEB161E60).

    Редактирано от krasnika^ (преглед на промените)
    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Най-вероятно причината е в драйвър - и може би отново този на VIA.

     

     

    DRIVER_IRQL_NOT_LESS_OR_EQUAL

     

     

     

    Вижте дали има нов dmp файл в папката C:Windowsminidump и ако има го архивирайте.

     

    Ако отново се окаже, че е заради драйвъра на VIA инсталирайте последната версия без сертификата и пробвайте да работите без микрофона или пробвайте изцяло да карате само на драйвърите на Realtek. Щом помагате по TeamViewer-a няма и как да тествате рама от разстояние - но като имате физически достъп до компютъра тествайте плочките на РАМ-а една по една с Memtest, както бях написал по-нагоре.

     

    Също така:

     

    Изтеглете Autoruns и:

     

    • [*]Стартирайте програмата; [*]Изберете
    Options => Filter Options => сложете отметки пред Verify Code Signature и Hide Microsoft Entries; [*]От менюто File -> Refresh; [*]От менюто File -> Save...; [*]Запазете файла някъде с желано от вас име (във формат arn), архивирайте го с програма по желание и го прикачете към темата.

    ПС: Остатъците от Есет можете да изтриете и ръчно.

    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Сложихме драйвера на производителя ( с който е купено дъното) и за сега има звук. Има нови Дъмп файлове които прилагам към темата, както и резултата от програмата който поискахте. Поздрави :) http://dox.bg/files/dw?a=b5f4cf62a5 - Minidump

    http://dox.bg/files/dw?a=46a1d5d226 Autoruns - резултат

     

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Лошото е, че драйвъра от сайта на производителя, който съм дал е доста стар и може би дори вие в момента сте били със същата версия, която е правила и проблема.

    Според дъмп файловете отново виновен е драйвъра на VIA - viahduaa.sys.

     

    Вариантите са 2.

     

    1. Деинсталирате го и използвате само този на Realtek.

    2. Инсталирате сертифицираната версия, която е по-нова версия от тази на сайта на Foxconn, но и по-стара от несертифицираната версия от сайта на Via.

     

    Поне знаете, къде е проблема! :)

     

    Колкото до Autoruns можете да премахнете следните отметки (не да ги изтриете, а само ги отмаркирайте):

     

    Adobe ARM

    HDAudDeck

     

    И после затворете програмата.

    Изтрийте използваните от нас инструменти. Аз маркирам случая като решен...просто за драйвъра за VIA ако това не помогне не се сещам за друго адекватно решение...

     

    Поздрави!

    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

     

    Прегледах дъмп файловете и всички се дължат на драйвъра на VIA за звука:

     

     

    Нека да видим каква е вашаха хардуерна конфигурация за да обновим драйвъра до последната му версия.

     

    Свалете програмата Публикувано изображениеHWiNFO32

    След успешна инсталация и стартиране, ще се появи следния прозорец:

    Публикувано изображение

    Натиснете Run.

    Изчакайте търпеливо. След това изберете Save Report и HTML формат и натиснете Browse.

    Посочете вашия десктоп и натиснете Next.

    Ще се появява се Report Filter, изберете Finish.

    Публикувано изображение

    На десктопа ще се появи HTML файл с име "User Name", където "User Name" е името на компютъра Ви (например файла от снимката се казва HOLLER-PC.HTM). Качете файла тук и публикувайте линка за download в следващия си пост.

    И един от дъмповете се дължи на следното:

     

     

    За тестване на РАМ паметта може да опитате с Memtest86+ 4.20

    Разархивирайте архива и запишете ISO файла с Burnaware например за да се получи буутващ диск с опцията Burn Image

    Публикувано изображение

    След това направете от БИОС-а CD/DVD устройството да е първото стартиращо устройство и направете проверка на РАМ паметта.

    Ако теста е успешен не би трябвало да има грешки:

    Публикувано изображение

    За да сте напълно сигурни, че РАМ-а е ок е добре да оставите теста за през нощта за поне едно 8-10 часа и още по-добре извадете всички плочки и оставете само една и ги тествайте една по една.

    Ако бъдат открити грешки ще видите грешки в червен фон подобно на тези:

    Публикувано изображение

    С огромно закъснение, за което много се извинявам, бих искал да ви съобщя, че състоянието на системата е много добро. Наложи се да преинсталираме целия компютъра с пълно форматиране и разцепване на харддиска, след което направих теста на РАМ паметта ( както ме посъветвахте - цяла нощ ) резултата е че : няма грешки в паметта, и за момента работи добре, и без сини екрани :)  Още веднъж Благодаря за помощта и положените усилия :)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Все пак причината бе и си остава в драйвърите на Realtek...и затова го имайте предвид! :)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    :)  точно затова този път съм качил всички без тях :)

    1 човек харесва това

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!


    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.


    Вход

    • Горещи теми в момента

    • Подобни теми

      • от Vasil Dinchev
        Здравейте, вчера парола от важен за мен сайт беше сменена от 3-та страна и предполагам, че може да е замесен злонамерен софтуер. Аз поне не намирам никакви симптоми, но бих ви помолил за една контролна проверка.

         
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-02-2017 02
        Ran by BaCkO (administrator) on BACKO-PC (17-02-2017 22:06:25)
        Running from C:\Users\BaCkO\Desktop
        Loaded Profiles: BaCkO (Available Profiles: BaCkO)
        Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (AMD) C:\Windows\System32\atiesrxx.exe
        (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
        (AMD) C:\Windows\System32\atieclxx.exe
        (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
        (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
        (Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
        () C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
        (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
        (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
        () C:\Program Files (x86)\RocketDock\RocketDock.exe
        (Flux Software LLC) C:\Users\BaCkO\AppData\Local\FluxSoftware\Flux\flux.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
        (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
        (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
        (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
        (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
        (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
        (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
        (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
        (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Intel Corporation) C:\Windows\System32\igfxEM.exe
        (Intel Corporation) C:\Windows\System32\igfxHK.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        ==================== Registry (Whitelisted) ====================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-11-12] (IDT, Inc.)
        HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2017-01-02] (AVAST Software)
        HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [290688 2012-10-24] (Intel Corporation)
        HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
        HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2650576 2017-02-08] (Malwarebytes Corporation)
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\Run: [f.lux] => C:\Users\BaCkO\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd)
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: F - F:\autorun.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: G - G:\_AUTORUN\AUTORUN.EXE
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: H - H:\AutoRun.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {221ad5d9-b2fe-11e6-998b-b4b52f77e326} - G:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {3ddb4eec-8fd4-11e6-9961-b4b52f77e326} - H:\AutoRun.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {4125c519-2329-11e6-bba0-b4b52f77e326} - F:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {43c865de-bf55-11e5-874a-b4b52f77e326} - I:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {44bacf95-c009-11e5-872c-b4b52f77e326} - G:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {4c18d71f-c86f-11e6-8783-b4b52f77e326} - G:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {7af691d3-4105-11e6-a600-b4b52f77e326} - F:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {7effa0f8-2347-11e5-8533-b4b52f77e326} - G:\_AUTORUN\AUTORUN.EXE
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {82f5eacf-b6f7-11e5-9cdd-806e6f6e6963} - F:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {9f10eb6f-19b0-11e6-a5f5-b4b52f77e326} - G:\HiSuiteDownLoader.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {c04d475c-94d2-11e5-8856-b4b52f77e326} - F:\HTC_Sync_Manager_PC.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {c99b52dc-a11a-11e6-9822-b4b52f77e326} - I:\Setup\rsrc\autorun.exe
        HKU\S-1-5-21-2664005903-183515750-1972193032-1000\...\MountPoints2: {c99b52e4-a11a-11e6-9822-b4b52f77e326} - I:\Setup\rsrc\autorun.exe
        ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-01-02] (AVAST Software)
        Startup: C:\Users\BaCkO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registration Heroes of Might & Magic 5 - Tribes of the East.LNK [2016-11-30]
        ShortcutTarget: Registration Heroes of Might & Magic 5 - Tribes of the East.LNK -> D:\Games\Heroes of Might and Magic V - Tribes of the East\Heroes of Might and Magic V - Tribes of the East\registration\RegistrationReminder.exe (No File)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{0D6BDB98-1F4E-4621-8BE0-39A5E2CF6C8D}: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{51EAC869-91B9-4C4B-871F-369476D36D08}: [DhcpNameServer] 192.168.42.129
        Tcpip\..\Interfaces\{D501F5B1-57C6-4B00-A764-FE3E452A4FDC}: [DhcpNameServer] 192.168.42.129
        Internet Explorer:
        ==================
        BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-01-02] (AVAST Software)
        Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
        FireFox:
        ========
        FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
        FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-23]
        FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
        FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-01-23]
        FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
        FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-15] ()
        FF Plugin: @java.com/DTPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2016-05-26] (Oracle Corporation)
        FF Plugin: @java.com/JavaPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2016-05-26] (Oracle Corporation)
        FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
        FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
        FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-15] ()
        FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-29] (Intel Corporation)
        FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-29] (Intel Corporation)
        FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
        FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-21] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
        FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [2015-08-18] ( Garena)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
        FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-21] (Microsoft Corporation)
        Chrome: 
        =======
        CHR DefaultProfile: Default
        CHR HomePage: Default -> hxxp://google.bg/
        CHR StartupUrls: Default -> "hxxp://google.bg/"
        CHR Profile: C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default [2017-02-17]
        CHR Extension: (Google Презентации) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-05]
        CHR Extension: (Google Документи) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-05]
        CHR Extension: (Google Диск) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
        CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2017-01-29]
        CHR Extension: (YouTube) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
        CHR Extension: (Adblock Plus) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
        CHR Extension: (Google Търсене) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
        CHR Extension: (Dark Vibe) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkckeanhmkjaechlhllmapjaaglgpcbj [2015-07-05]
        CHR Extension: (Електронни таблици от Google) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-05]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-20]
        CHR Extension: (ScriptSafe) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2017-01-27]
        CHR Extension: (Gmail) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-05]
        CHR Extension: (Chrome Media Router) - C:\Users\BaCkO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
        CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
        CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2017-01-02] (AVAST Software)
        R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
        R2 HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [192304 2016-02-16] ()
        R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
        R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]
        S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
        R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation)
        R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
        R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [155600 2017-02-08] (Malwarebytes Corporation)
        S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
        R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [327680 2012-11-12] (IDT, Inc.) [File not signed]
        R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7031056 2016-05-02] (TeamViewer GmbH)
        S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
        S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2017-01-02] (AVAST Software)
        R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2017-01-02] (AVAST Software)
        R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2017-01-02] (AVAST Software)
        R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2017-01-02] (AVAST Software)
        R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2017-01-02] (AVAST Software)
        R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2017-01-02] (AVAST Software)
        R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2017-01-02] (AVAST Software)
        R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2017-01-02] (AVAST Software)
        R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2017-01-02] (AVAST Software)
        R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-07-05] (Disc Soft Ltd)
        R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [77408 2017-02-08] ()
        S3 HPMo4DE3; C:\Windows\System32\DRIVERS\HPMo4DE3.sys [25088 2011-03-09] (TPMX Electronics Ltd.)
        S3 HPub4DE3; C:\Windows\System32\Drivers\HPub4DE3.sys [18432 2011-04-12] (TPMX Electronics Ltd.)
        U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-02-16] (Huawei Technologies Co., Ltd.)
        R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
        S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [10848 2000-03-10] () [File not signed]
        R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1866080 2012-11-20] ()
        S3 ALSysIO; \??\C:\Users\BaCkO\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
        S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
        S3 gkernel; \??\C:\Users\BaCkO\AppData\Local\Temp\gkernel.sys [X] <==== ATTENTION
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-02-17 22:06 - 2017-02-17 22:07 - 00018459 _____ C:\Users\BaCkO\Desktop\FRST.txt
        2017-02-17 22:06 - 2017-02-17 22:06 - 00000000 ____D C:\FRST
        2017-02-17 22:05 - 2017-02-17 22:03 - 02422272 _____ (Farbar) C:\Users\BaCkO\Desktop\FRST64.exe
        2017-02-17 22:04 - 2017-02-17 22:04 - 00032416 _____ C:\Users\BaCkO\Downloads\Addition.txt
        2017-02-17 22:03 - 2017-02-17 22:03 - 02422272 _____ (Farbar) C:\Users\BaCkO\Downloads\FRST64.exe
        2017-02-14 16:31 - 2017-02-14 16:31 - 00013445 _____ C:\Users\BaCkO\Downloads\Tushy - Janice Griffith (My Fantasy of a Double Penetration) (10 February, 2017).torrent
        2017-02-10 12:18 - 2017-02-10 12:18 - 08363171 _____ C:\Users\BaCkO\Downloads\izpiten-variant.pdf
        2017-02-09 21:38 - 2017-02-09 21:38 - 07120449 _____ C:\Users\BaCkO\Downloads\mveu-lekcii.pdf
        2017-02-09 21:37 - 2017-02-09 21:37 - 00155713 _____ C:\Users\BaCkO\Downloads\Zadachi-MVEU.pdf
        2017-02-09 21:37 - 2017-02-09 21:37 - 00000000 ____D C:\Users\BaCkO\Desktop\МВЕУ
        2017-02-09 12:57 - 2017-02-09 12:57 - 00072064 _____ C:\Users\BaCkO\Downloads\formulas.pdf
        2017-02-08 23:55 - 2017-02-08 23:55 - 01076607 _____ C:\Users\BaCkO\Downloads\Lab1.5.pdf
        2017-02-08 19:16 - 2017-02-09 13:02 - 00000000 ____D C:\Users\BaCkO\Desktop\РВРЛ
        2017-02-06 21:40 - 2017-02-06 21:40 - 04958410 _____ C:\Users\BaCkO\Downloads\TE-ZADACHI.zip
        2017-02-06 21:39 - 2017-02-06 21:39 - 02863356 _____ C:\Users\BaCkO\Downloads\TE-VUPROSI.zip
        2017-02-06 13:14 - 2017-02-06 13:14 - 00956075 _____ C:\Users\BaCkO\Downloads\tzu-all (1).pdf
        2017-02-06 12:51 - 2017-02-06 12:51 - 00956075 _____ C:\Users\BaCkO\Downloads\tzu-all.pdf
        2017-02-06 10:38 - 2017-02-06 21:40 - 00000000 ____D C:\Users\BaCkO\Desktop\TE
        2017-02-05 21:07 - 2017-02-10 12:19 - 00000000 ____D C:\Users\BaCkO\Desktop\АСХТ
        2017-02-05 21:04 - 2017-02-07 15:09 - 00000000 ____D C:\Users\BaCkO\Desktop\ТЗУ
        2017-02-05 13:17 - 2017-02-05 13:18 - 07283409 _____ C:\Users\BaCkO\Downloads\TE.rar
        2017-02-04 19:42 - 2017-02-07 11:38 - 00000141 _____ C:\Users\BaCkO\Desktop\поправки.txt
        2017-02-04 18:18 - 2017-02-08 15:11 - 00000000 ____D C:\Users\BaCkO\Desktop\PPE
        2017-01-29 18:38 - 2017-01-29 18:38 - 00078600 _____ C:\Users\BaCkO\Downloads\Diablo II.exe.torrent
        2017-01-26 20:01 - 2017-01-26 20:03 - 00000000 ____D C:\Users\BaCkO\Desktop\AS izpit
        2017-01-26 20:01 - 2017-01-26 20:01 - 05771411 _____ C:\Users\BaCkO\Downloads\AS-izpit.rar
        2017-01-25 20:31 - 2017-01-25 20:31 - 00454078 _____ C:\Users\BaCkO\Downloads\Geometry.rar
        2017-01-24 15:35 - 2017-01-24 15:35 - 00067288 _____ C:\Users\BaCkO\Downloads\vicky.cristina.barcelona.2008.bdrip.x264.ac3.6ch-waf(subsunacs.net).rar
        2017-01-24 15:34 - 2017-01-24 15:34 - 00012443 _____ C:\Users\BaCkO\Downloads\Vicky.Cristina.Barcelona.2008.BDRip.x265-WARHD.torrent
        2017-01-23 10:53 - 2017-01-23 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
        2017-01-23 10:52 - 2017-01-02 13:27 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
        2017-01-22 16:54 - 2017-01-22 16:54 - 00418567 _____ C:\Users\BaCkO\Downloads\XR_Vaz_2107.rar
        2017-01-21 11:26 - 2017-01-21 11:26 - 00155713 _____ C:\Users\BaCkO\Downloads\problems.pdf
        2017-01-21 11:24 - 2017-02-10 12:21 - 00000000 ____D C:\Users\BaCkO\Desktop\MVEU zadachi
        2017-01-21 11:24 - 2017-01-21 11:24 - 03323889 _____ C:\Users\BaCkO\Downloads\MVEU-zadachi.rar
        2017-01-19 20:24 - 2017-01-19 21:52 - 268057276 _____ C:\Users\BaCkO\Downloads\05210733-1---razkreposteni89-sd-4436d1db52642e9bc90cd2d2f447ab5559463e884e75e76a46909c109b4ed35d.flv.rar
        2017-01-19 19:34 - 2017-01-19 19:34 - 02637812 _____ C:\Users\BaCkO\Downloads\20141112141926.rar
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-02-17 21:34 - 2009-07-14 06:45 - 00031504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
        2017-02-17 21:34 - 2009-07-14 06:45 - 00031504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
        2017-02-17 21:27 - 2015-07-09 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
        2017-02-17 21:23 - 2015-07-05 21:22 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
        2017-02-17 21:22 - 2017-01-17 16:38 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
        2017-02-17 21:20 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
        2017-02-16 11:06 - 2015-07-09 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
        2017-02-16 11:06 - 2015-07-09 17:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
        2017-02-15 23:23 - 2015-07-05 21:22 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
        2017-02-15 23:23 - 2015-07-05 21:22 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
        2017-02-15 23:23 - 2015-07-05 21:22 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
        2017-02-15 23:23 - 2015-07-05 21:22 - 00000000 ____D C:\Windows\SysWOW64\Macromed
        2017-02-15 23:23 - 2015-07-05 21:22 - 00000000 ____D C:\Windows\system32\Macromed
        2017-02-14 18:57 - 2015-07-05 21:32 - 00000000 ____D C:\Users\BaCkO\AppData\Roaming\AIMP3
        2017-02-14 18:46 - 2009-07-14 07:13 - 00781790 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-02-14 18:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
        2017-02-14 17:22 - 2015-07-05 20:39 - 00000000 ____D C:\Users\BaCkO\AppData\Roaming\uTorrent
        2017-02-14 16:53 - 2015-07-05 20:34 - 00000000 ____D C:\KMPlayer
        2017-02-07 00:20 - 2015-07-05 19:56 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-02-05 22:34 - 2015-07-05 20:15 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
        2017-02-03 00:02 - 2016-06-14 16:28 - 00000000 ___RD C:\Program Files (x86)\Skype
        2017-02-03 00:02 - 2015-07-07 17:13 - 00000000 ____D C:\ProgramData\Skype
        2017-01-29 21:14 - 2017-01-10 19:37 - 00000000 ____D C:\Users\BaCkO\Desktop\ook izpit
        2017-01-29 18:49 - 2015-08-17 22:54 - 00000000 ____D C:\Users\BaCkO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
        2017-01-25 20:31 - 2016-11-08 19:23 - 00000000 ____D C:\Users\BaCkO\Desktop\velomania
        2017-01-24 23:44 - 2015-07-07 17:13 - 00000000 ____D C:\Users\BaCkO\AppData\Roaming\Skype
        2017-01-23 21:13 - 2016-03-15 01:17 - 00003890 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1457997464
        2017-01-23 10:52 - 2015-07-05 20:00 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
        2017-01-22 12:12 - 2015-07-05 21:31 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
        ==================== Files in the root of some directories =======
        2015-08-24 18:29 - 2015-12-26 12:40 - 0045270 _____ () C:\Users\BaCkO\AppData\Roaming\room_v3.dat
        2015-07-05 21:11 - 2016-11-30 14:21 - 0007605 _____ () C:\Users\BaCkO\AppData\Local\resmon.resmoncfg
        Some files in TEMP:
        ====================
        2016-11-30 13:54 - 2016-11-30 13:54 - 3662874 _____ (Nival Interactive                                           ) C:\Users\BaCkO\AppData\Local\Temp\ubiD684.tmp.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\SysWOW64\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-02-12 19:37
        ==================== End of FRST.txt ============================
        Addition.txt
      • от DVB_Racer
        Здравейте,
        отскоро в историята на Мозила Файърфокс ми се отразява този адрес:
        https://staticxx.facebook.com/connect/xd_arbiter/r/0eWevUAMuoH.js?version=42#channel
        Вчера сканирах с антивирусната програма и тя блокира още два адреса (мога да кача снимка от отчета, ако желаете).
        Прикачвам логовете:
        FRST.txt
        Addition.txt
      • от kaloyan.k219
        Здравейте. Вчера, докато си разглеждах форума автоматично се отвори страница, която изтегли разширението Click&Clean, което доста забави компютъра ми. Ето логовете:
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-02-2017 02
        Ran by kaloy (administrator) on DESKTOP-KGGDGCH (16-02-2017 20:11:28)
        Running from C:\Users\kaloy\Desktop
        Loaded Profiles: kaloy (Available Profiles: kaloy)
        Platform: Windows 10 Pro Version 1607 (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
        (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
        (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
        (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
        (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
        (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
        (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
        (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
        (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
        (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
        (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
        (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.693_none_42ff55c9655f38bf\TiWorker.exe
        ==================== Registry (Whitelisted) ====================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8844032 2016-01-27] (Realtek Semiconductor)
        HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2016-05-31] (Intel Corporation)
        HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
        HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-09] (AVAST Software)
        HKU\S-1-5-21-1066247772-3217912413-2287403915-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
        ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-09] (AVAST Software)
        ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-09] (AVAST Software)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
        Tcpip\..\Interfaces\{f3a5ed2c-e4ab-4da0-9aa8-115b6da2172b}: [DhcpNameServer] 192.168.10.1
        Internet Explorer:
        ==================
        BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
        BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
        BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
        BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
        FireFox:
        ========
        FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
        FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-02-05]
        FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
        FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-02-05]
        FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
        FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
        FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
        FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
        FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-05] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-05] (Google Inc.)
        Chrome: 
        =======
        CHR Profile: C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default [2017-02-16]
        CHR Extension: (Google Документи) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-05]
        CHR Extension: (Google Диск) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-05]
        CHR Extension: (YouTube) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-05]
        CHR Extension: (Google Документи офлайн) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-05]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-05]
        CHR Extension: (Gmail) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-05]
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-09] (AVAST Software s.r.o.)
        R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-09] (AVAST Software)
        R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17992 2016-05-31] (Intel Corporation)
        R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
        S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
        R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
        R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)
        S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2017-02-05] (Microsoft Corporation)
        S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
        S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-09] (AVAST Software s.r.o.)
        R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-09] (AVAST Software s.r.o.)
        R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-09] (AVAST Software s.r.o.)
        R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-09] (AVAST Software s.r.o.)
        S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-09] (AVAST Software)
        R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-09] (AVAST Software)
        R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-09] (AVAST Software)
        R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-09] (AVAST Software)
        R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-09] (AVAST Software)
        R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-09] (AVAST Software)
        R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-09] (AVAST Software)
        R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-09] (AVAST Software)
        R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-12] (AVAST Software)
        S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
        R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
        S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)
        R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
        R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-10-10] (Realtek                                            )
        S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
        S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
        S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-02-16 20:11 - 2017-02-16 20:11 - 00000000 ____D C:\Users\kaloy\Desktop\FRST-OlderVersion
        2017-02-16 20:08 - 2017-02-16 20:08 - 00000000 ___HD C:\OneDriveTemp
        2017-02-15 20:11 - 2017-02-15 20:11 - 00491368 _____ C:\Users\kaloy\Downloads\SGTA50001
        2017-02-15 19:01 - 2017-02-16 20:12 - 00012496 _____ C:\Users\kaloy\Desktop\FRST.txt
        2017-02-15 19:01 - 2017-02-16 20:11 - 00000000 ____D C:\FRST
        2017-02-15 19:00 - 2017-02-16 20:11 - 02422272 _____ (Farbar) C:\Users\kaloy\Desktop\FRST64.exe
        2017-02-13 20:24 - 2017-02-13 20:24 - 00000714 _____ C:\DelFix.txt
        2017-02-12 20:54 - 2017-02-12 21:20 - 00000000 ____D C:\EEK
        2017-02-12 20:39 - 2017-02-12 20:39 - 00000000 ____D C:\ProgramData\SWCUTemp
        2017-02-12 18:33 - 2017-02-12 18:33 - 00000000 ____D C:\Users\kaloy\OneDrive\Документи\Rockstar Games
        2017-02-12 18:33 - 2017-02-12 18:33 - 00000000 ____D C:\Users\kaloy\AppData\Local\Rockstar Games
        2017-02-12 18:33 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
        2017-02-12 18:33 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
        2017-02-12 18:33 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
        2017-02-12 18:33 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
        2017-02-12 18:33 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
        2017-02-12 18:33 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
        2017-02-12 18:33 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
        2017-02-12 18:33 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
        2017-02-12 18:33 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
        2017-02-12 18:33 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
        2017-02-12 18:33 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
        2017-02-12 18:33 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
        2017-02-12 18:33 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
        2017-02-12 18:33 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
        2017-02-12 18:33 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
        2017-02-12 18:33 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
        2017-02-12 18:33 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
        2017-02-12 18:33 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
        2017-02-12 18:33 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
        2017-02-12 18:33 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
        2017-02-12 18:33 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
        2017-02-12 18:33 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
        2017-02-12 18:33 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
        2017-02-12 18:33 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
        2017-02-12 18:33 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
        2017-02-12 18:33 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
        2017-02-12 18:33 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
        2017-02-12 18:33 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
        2017-02-12 18:33 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
        2017-02-12 18:33 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
        2017-02-12 18:33 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
        2017-02-12 18:33 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
        2017-02-12 18:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
        2017-02-12 18:33 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
        2017-02-12 18:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
        2017-02-12 18:33 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
        2017-02-12 18:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
        2017-02-12 18:33 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
        2017-02-12 18:33 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
        2017-02-12 18:33 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
        2017-02-12 18:33 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
        2017-02-12 18:33 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
        2017-02-12 18:33 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
        2017-02-12 18:33 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
        2017-02-12 18:33 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
        2017-02-12 18:33 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
        2017-02-12 18:33 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
        2017-02-12 18:33 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
        2017-02-12 18:33 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
        2017-02-12 18:33 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
        2017-02-12 18:33 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
        2017-02-12 18:33 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
        2017-02-12 18:33 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
        2017-02-12 18:33 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
        2017-02-12 18:33 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
        2017-02-12 18:33 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
        2017-02-12 18:33 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
        2017-02-12 18:33 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
        2017-02-12 18:33 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
        2017-02-12 18:33 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
        2017-02-12 18:33 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
        2017-02-12 18:33 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
        2017-02-12 18:33 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
        2017-02-12 18:33 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
        2017-02-12 18:33 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
        2017-02-12 18:33 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
        2017-02-12 18:33 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
        2017-02-12 18:33 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
        2017-02-12 18:33 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
        2017-02-12 18:33 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
        2017-02-12 18:33 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
        2017-02-12 18:33 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
        2017-02-12 18:33 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
        2017-02-12 18:33 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
        2017-02-12 18:33 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
        2017-02-12 18:33 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
        2017-02-12 18:33 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
        2017-02-12 18:33 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
        2017-02-12 18:33 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
        2017-02-12 18:33 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
        2017-02-12 18:33 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
        2017-02-12 18:33 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
        2017-02-12 18:33 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
        2017-02-12 18:33 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
        2017-02-12 18:33 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
        2017-02-12 18:33 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
        2017-02-12 18:33 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
        2017-02-12 18:33 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
        2017-02-12 18:33 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
        2017-02-12 18:33 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
        2017-02-12 18:33 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
        2017-02-12 18:33 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
        2017-02-12 18:33 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
        2017-02-12 18:33 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
        2017-02-12 18:33 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
        2017-02-12 18:33 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
        2017-02-12 18:33 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
        2017-02-12 18:33 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
        2017-02-12 18:33 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
        2017-02-12 18:33 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
        2017-02-12 18:33 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
        2017-02-12 18:33 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
        2017-02-12 18:33 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
        2017-02-12 18:33 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
        2017-02-12 18:33 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
        2017-02-12 18:33 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
        2017-02-12 18:33 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
        2017-02-12 18:33 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
        2017-02-12 18:33 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
        2017-02-12 18:33 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
        2017-02-12 18:33 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
        2017-02-12 18:33 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
        2017-02-12 18:33 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
        2017-02-12 18:33 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
        2017-02-12 18:33 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
        2017-02-12 18:33 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
        2017-02-12 18:33 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
        2017-02-12 18:33 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
        2017-02-12 18:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
        2017-02-12 18:33 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
        2017-02-12 18:33 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
        2017-02-12 18:33 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
        2017-02-12 18:33 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
        2017-02-12 18:33 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
        2017-02-12 18:33 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
        2017-02-12 18:33 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
        2017-02-12 18:33 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
        2017-02-12 18:33 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
        2017-02-12 18:33 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
        2017-02-12 18:33 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
        2017-02-12 18:33 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
        2017-02-12 18:33 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
        2017-02-12 18:33 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
        2017-02-12 18:33 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
        2017-02-12 18:33 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
        2017-02-12 18:33 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
        2017-02-12 18:33 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
        2017-02-12 18:33 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
        2017-02-12 18:33 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
        2017-02-12 18:33 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
        2017-02-12 18:33 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
        2017-02-12 18:33 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
        2017-02-12 18:33 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
        2017-02-12 18:33 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
        2017-02-12 18:33 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
        2017-02-12 18:33 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
        2017-02-12 18:33 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
        2017-02-12 18:33 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
        2017-02-12 18:33 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
        2017-02-12 18:33 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
        2017-02-12 18:33 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
        2017-02-12 18:33 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
        2017-02-12 18:33 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
        2017-02-12 18:32 - 2017-02-12 18:32 - 00000000 ____D C:\Program Files\Rockstar Games
        2017-02-12 18:32 - 2017-02-12 18:32 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
        2017-02-12 09:49 - 2017-02-15 18:59 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
        2017-02-12 09:49 - 2017-02-12 09:49 - 00001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
        2017-02-12 09:49 - 2017-02-12 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
        2017-02-12 09:48 - 2017-02-12 09:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
        2017-02-12 09:48 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
        2017-02-12 09:48 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
        2017-02-12 09:48 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
        2017-02-12 01:34 - 2017-02-12 01:34 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Macromedia
        2017-02-12 01:34 - 2017-02-12 01:34 - 00000000 ____D C:\Users\kaloy\AppData\Local\CrashDumps
        2017-02-12 01:17 - 2017-02-12 01:17 - 00000222 _____ C:\Users\kaloy\Desktop\Grand Theft Auto V.url
        2017-02-12 01:17 - 2017-02-12 01:17 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
        2017-02-12 00:29 - 2017-02-12 00:29 - 00000000 ____D C:\Users\kaloy\AppData\Local\Steam
        2017-02-12 00:24 - 2017-02-16 20:08 - 00000000 ____D C:\Program Files (x86)\Steam
        2017-02-12 00:24 - 2017-02-12 00:24 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk
        2017-02-12 00:24 - 2017-02-12 00:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
        2017-02-10 21:24 - 2017-02-10 21:24 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Design Science
        2017-02-10 21:23 - 2017-02-10 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6
        2017-02-10 21:23 - 2017-02-10 21:23 - 00000000 ____D C:\Program Files (x86)\MathType
        2017-02-09 18:59 - 2017-02-09 18:59 - 00000000 ____D C:\Users\kaloy\AppData\Local\AVAST Software
        2017-02-09 18:51 - 2017-02-09 18:51 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
        2017-02-09 18:49 - 2017-02-09 18:49 - 00000000 ____D C:\WINDOWS\pss
        2017-02-09 16:19 - 2017-02-09 16:19 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
        2017-02-09 16:19 - 2017-02-09 16:19 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
        2017-02-09 16:19 - 2017-02-09 16:18 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
        2017-02-09 16:19 - 2017-02-09 16:18 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
        2017-02-09 16:19 - 2017-02-09 16:18 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
        2017-02-09 16:19 - 2017-02-09 16:18 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
        2017-02-08 20:12 - 2017-02-08 20:12 - 00000000 ____D C:\Program Files (x86)\VulkanRT
        2017-02-08 20:12 - 2017-01-04 15:24 - 00222648 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
        2017-02-08 20:12 - 2016-12-29 14:43 - 00133056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
        2017-02-08 20:12 - 2016-09-09 20:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
        2017-02-08 20:12 - 2016-09-09 20:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
        2017-02-08 20:12 - 2016-09-09 20:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
        2017-02-08 20:12 - 2016-09-09 20:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
        2017-02-07 17:36 - 2017-02-07 17:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
        2017-02-06 19:29 - 2017-02-11 23:09 - 00000000 ____D C:\Users\kaloy\AppData\Local\MicrosoftEdge
        2017-02-06 16:37 - 2017-02-06 16:37 - 00000000 ____D C:\Users\kaloy\.ssh
        2017-02-06 13:15 - 2016-12-21 09:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
        2017-02-06 13:15 - 2016-12-21 06:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
        2017-02-05 19:25 - 2017-02-05 19:25 - 00000000 ____D C:\ProgramData\USOShared
        2017-02-05 18:36 - 2017-02-05 18:36 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\WinRAR
        2017-02-05 18:35 - 2017-02-05 18:35 - 00001599 _____ C:\Users\kaloy\Desktop\Minecraft.lnk
        2017-02-05 18:35 - 2017-02-05 18:35 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\NVIDIA
        2017-02-05 18:33 - 2017-02-05 18:33 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\java
        2017-02-05 18:30 - 2017-02-15 19:55 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\.minecraft
        2017-02-05 18:29 - 2017-02-09 19:25 - 00000000 ____D C:\Program Files (x86)\Minecraft
        2017-02-05 18:29 - 2017-02-05 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
        2017-02-05 18:22 - 2017-02-05 18:22 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
        2017-02-05 18:20 - 2017-02-05 18:20 - 00000000 ____D C:\Users\kaloy\AppData\Local\PackageStaging
        2017-02-05 18:19 - 2017-02-06 13:19 - 00000000 ____D C:\Users\kaloy\AppData\Local\ConnectedDevicesPlatform
        2017-02-05 18:19 - 2017-02-05 18:19 - 00000020 ___SH C:\Users\kaloy\ntuser.ini
        2017-02-05 18:17 - 2017-02-13 20:02 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
        2017-02-05 18:17 - 2017-02-12 20:37 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-02-05 18:17 - 2017-02-09 18:56 - 00004038 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1486309004
        2017-02-05 18:17 - 2017-02-05 18:17 - 00007623 _____ C:\WINDOWS\diagwrn.xml
        2017-02-05 18:17 - 2017-02-05 18:17 - 00007623 _____ C:\WINDOWS\diagerr.xml
        2017-02-05 18:17 - 2017-02-05 18:17 - 00003142 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00003114 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002962 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002942 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002852 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002810 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002772 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
        2017-02-05 18:16 - 2017-02-05 18:17 - 00003444 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
        2017-02-05 18:16 - 2017-02-05 18:17 - 00003220 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
        2017-02-05 18:16 - 2017-02-05 18:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
        2017-02-05 18:13 - 2017-02-05 18:13 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
        2017-02-05 18:10 - 2017-02-05 18:10 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
        2017-02-05 18:08 - 2017-02-05 18:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
        2017-02-05 18:07 - 2017-02-15 21:53 - 00000000 ____D C:\Users\kaloy
        2017-02-05 18:05 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
        2017-02-05 18:04 - 2017-02-05 18:04 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
        2017-02-05 18:04 - 2017-02-05 18:04 - 00000000 ____D C:\Program Files\Realtek
        2017-02-05 18:04 - 2016-12-29 14:44 - 06386232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 02477624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
        2017-02-05 18:04 - 2016-12-19 09:26 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin
        2017-02-05 18:03 - 2017-02-11 18:39 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
        2017-02-05 18:03 - 2017-02-05 18:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation
        2017-02-05 18:03 - 2017-02-05 18:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
        2017-02-05 18:03 - 2017-02-05 18:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
        2017-02-05 18:02 - 2017-02-15 21:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
        2017-02-05 18:02 - 2017-02-12 20:37 - 00355368 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-02-05 18:01 - 2017-02-05 18:18 - 00000000 ___DC C:\WINDOWS\Panther
        2017-02-05 17:59 - 2017-02-05 17:59 - 00000000 ____D C:\Windows.old
        2017-02-05 17:57 - 2017-02-05 17:57 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
        2017-02-05 17:57 - 2017-02-05 17:57 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
        2017-02-05 17:57 - 2017-02-05 17:57 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
        2017-02-05 17:57 - 2017-02-05 17:57 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
        2017-02-05 17:57 - 2017-02-05 17:57 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
        2017-02-05 17:57 - 2017-02-05 17:57 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml
        2017-02-05 17:57 - 2017-02-05 17:57 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
        2017-02-05 17:57 - 2017-02-05 17:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveprompt.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\baaupdate.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
        2017-02-05 17:57 - 2017-02-05 17:57 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
        2017-02-05 17:57 - 2017-02-05 17:57 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 02169184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01669984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01400160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
        2017-02-05 17:56 - 2017-02-05 17:56 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01054048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
        2017-02-05 17:56 - 2017-02-05 17:56 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00992096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
        2017-02-05 17:56 - 2017-02-05 17:56 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00822624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00813408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls
        2017-02-05 17:56 - 2017-02-05 17:56 - 00788624 _____ C:\WINDOWS\system32\locale.nls
        2017-02-05 17:56 - 2017-02-05 17:56 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00779616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00752992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00571744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00513376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00406368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
        2017-02-05 17:56 - 2017-02-05 17:56 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
        2017-02-05 17:56 - 2017-02-05 17:56 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\tspubwmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00190816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
        2017-02-05 17:56 - 2017-02-05 17:56 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00127328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
        2017-02-05 17:56 - 2017-02-05 17:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
        2017-02-05 17:56 - 2017-02-05 17:56 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
        2017-02-05 17:46 - 2017-02-05 18:02 - 00000000 ____D C:\WINDOWS\ServiceProfiles
        2017-02-05 17:46 - 2017-02-05 17:46 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
        2017-02-05 17:45 - 2017-02-05 17:45 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
        2017-02-05 17:45 - 2017-02-05 17:45 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
        2017-02-05 17:36 - 2017-02-09 18:56 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
        2017-02-05 17:36 - 2017-02-09 16:19 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
        2017-02-05 17:36 - 2017-02-05 17:36 - 00001088 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
        2017-02-05 17:36 - 2017-02-05 17:36 - 00000000 ____D C:\Users\kaloy\AppData\Local\CEF
        2017-02-05 17:35 - 2017-02-12 20:45 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148692515490601
        2017-02-05 17:35 - 2017-02-09 16:19 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
        2017-02-05 17:35 - 2017-02-05 19:25 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
        2017-02-05 17:35 - 2017-02-05 19:25 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
        2017-02-05 17:35 - 2017-02-05 17:35 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\AVAST Software
        2017-02-05 17:35 - 2017-02-05 17:35 - 00000000 ____D C:\Program Files\Common Files\AV
        2017-02-05 17:35 - 2017-02-05 17:34 - 00969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys.148630892298407
        2017-02-05 17:35 - 2017-02-05 17:34 - 00513496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.148630892520310
        2017-02-05 17:35 - 2017-02-05 17:34 - 00292704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148630892668712
        2017-02-05 17:34 - 2017-02-13 16:07 - 00000000 ____D C:\ProgramData\AVAST Software
        2017-02-05 17:34 - 2017-02-05 17:36 - 00000000 ____D C:\Program Files\AVAST Software
        2017-02-05 17:34 - 2017-02-05 17:34 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
        2017-02-05 17:33 - 2017-02-06 14:15 - 00000000 ____D C:\Users\kaloy\AppData\Local\Google
        2017-02-05 17:33 - 2017-02-05 18:21 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-02-05 17:33 - 2017-02-05 18:21 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
        2017-02-05 17:33 - 2017-02-05 18:10 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-02-05 17:33 - 2017-02-05 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-02-05 17:33 - 2017-02-05 17:33 - 00000000 ____D C:\Program Files\WinRAR
        2017-02-05 17:33 - 2017-02-05 17:33 - 00000000 ____D C:\Program Files (x86)\Google
        2017-02-05 17:29 - 2017-02-12 09:44 - 00000000 ____D C:\ProgramData\Malwarebytes
        2017-02-05 17:29 - 2017-02-05 17:29 - 00000000 ____D C:\WINDOWS\system32\Drivers\etc\BACKUP
        2017-02-05 17:29 - 2017-02-05 17:29 - 00000000 ____D C:\Program Files\Malwarebytes
        2017-02-05 17:08 - 2017-02-05 17:21 - 00000000 ___HD C:\$WINDOWS.~BT
        2017-02-05 17:07 - 2017-02-05 17:08 - 00000036 _____ C:\WINDOWS\progress.ini
        2017-02-05 16:52 - 2017-02-05 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
        2017-02-05 16:52 - 2017-02-05 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
        2017-02-05 16:52 - 2017-02-05 16:52 - 00000000 ____D C:\Program Files (x86)\MSBuild
        2017-02-05 16:52 - 2017-02-05 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
        2017-02-05 16:51 - 2017-02-05 18:10 - 00000000 ____D C:\WINDOWS\SHELLNEW
        2017-02-05 16:51 - 2017-02-05 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 __RHD C:\MSOCache
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Users\kaloy\AppData\Local\Microsoft Help
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Program Files\Microsoft Office
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
        2017-02-05 16:49 - 2017-02-05 16:51 - 00000000 ____D C:\Users\kaloy\AppData\Local\MSfree Inc
        2017-02-05 16:49 - 2017-02-05 16:49 - 00000000 ____D C:\Users\kaloy\AppData\Local\PeerDistRepub
        2017-02-05 16:19 - 2017-02-05 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
        2017-02-05 16:19 - 2017-02-05 18:08 - 00000000 ____D C:\WINDOWS\system32\BestPractices
        2017-02-05 16:16 - 2017-02-11 18:41 - 00000000 ____D C:\Users\kaloy\AppData\Local\NVIDIA Corporation
        2017-02-05 16:16 - 2017-02-11 18:39 - 00000000 ____D C:\Users\kaloy\AppData\Local\NVIDIA
        2017-02-05 16:16 - 2017-02-05 16:16 - 00001489 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
        2017-02-05 16:15 - 2017-02-08 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
        2017-02-05 16:15 - 2016-11-17 15:44 - 01854400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 01755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 01452480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 01317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 00120256 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
        2017-02-05 16:14 - 2016-12-29 15:06 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
        2017-02-05 16:13 - 2017-01-04 15:19 - 01604160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
        2017-02-05 16:13 - 2017-01-04 15:19 - 00221640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
        2017-02-05 16:13 - 2017-01-04 15:02 - 03977632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
        2017-02-05 16:13 - 2017-01-04 10:07 - 00042286 _____ C:\WINDOWS\system32\nvinfo.pb
        2017-02-05 16:13 - 2016-12-01 22:02 - 01951680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437619.dll
        2017-02-05 16:13 - 2016-12-01 22:02 - 01586744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437619.dll
        2017-02-05 16:13 - 2016-12-01 22:02 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
        2017-02-05 16:13 - 2016-12-01 22:02 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json
        2017-02-05 16:13 - 2016-11-17 15:44 - 00101824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
        2017-02-05 16:13 - 2016-11-17 15:44 - 00091584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
        2017-02-05 16:13 - 2016-11-17 15:44 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
        2017-02-05 16:11 - 2017-02-05 16:11 - 00000000 ____D C:\NVIDIA
        2017-02-05 16:11 - 2017-02-05 16:11 - 00000000 ____D C:\Intel
        2017-02-05 16:10 - 2015-10-10 07:27 - 00935168 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
        2017-02-05 16:10 - 2015-10-10 07:27 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
        2017-02-05 16:09 - 2017-02-12 18:33 - 00000000 ____D C:\ProgramData\Package Cache
        2017-02-05 16:09 - 2017-02-05 18:14 - 00846312 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
        2017-02-05 16:09 - 2017-02-05 18:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\Users\kaloy\Intel
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Intel Corporation
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\ProgramData\Intel
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\Program Files\Intel
        2017-02-05 16:08 - 2017-02-05 16:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
        2017-02-05 16:08 - 2017-02-05 16:10 - 00000000 ____D C:\Program Files (x86)\Realtek
        2017-02-05 16:08 - 2016-01-27 10:04 - 03195648 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
        2017-02-05 16:08 - 2016-01-27 10:04 - 02894976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
        2017-02-05 16:08 - 2016-01-27 10:03 - 72203792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
        2017-02-05 16:08 - 2016-01-27 10:03 - 07172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 04779776 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
        2017-02-05 16:08 - 2016-01-27 10:03 - 03769493 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
        2017-02-05 16:08 - 2016-01-27 10:03 - 03283248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 03080784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 02036992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01356504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00447728 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00445408 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00192992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00084616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00023704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
        2017-02-05 16:07 - 2017-02-05 16:08 - 00000000 ___HD C:\Program Files (x86)\Temp
        2017-02-05 16:07 - 2016-01-06 16:23 - 02826832 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
        2017-02-05 15:53 - 2017-02-05 15:53 - 00000000 ____D C:\WINDOWS\system32\MRT
        2017-02-05 15:52 - 2017-02-05 15:53 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
        2017-02-05 15:49 - 2016-07-01 05:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
        2017-02-05 15:47 - 2016-07-01 05:57 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
        2017-02-05 15:19 - 2016-10-28 03:22 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
        2017-02-05 13:14 - 2017-02-05 13:14 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Skype
        2017-02-05 13:13 - 2017-02-16 20:08 - 00000000 ___RD C:\Users\kaloy\OneDrive
        2017-02-05 13:13 - 2017-02-16 20:08 - 00000000 ____D C:\ProgramData\NVIDIA
        2017-02-05 13:13 - 2017-02-11 15:35 - 00000000 ____D C:\Users\kaloy\AppData\Local\Comms
        2017-02-05 13:13 - 2017-02-05 18:23 - 00002395 _____ C:\Users\kaloy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
        2017-02-05 13:13 - 2017-02-05 18:18 - 00000000 ___HD C:\$GetCurrent
        2017-02-05 13:12 - 2017-02-05 18:19 - 00000000 ____D C:\Windows10Upgrade
        2017-02-05 13:12 - 2017-02-05 13:12 - 00000811 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Помощник за надстройка на Windows 10.lnk
        2017-02-05 13:12 - 2017-02-05 13:12 - 00000799 _____ C:\Users\kaloy\Desktop\Помощник за надстройка на Windows 10.lnk
        2017-02-05 13:12 - 2017-02-05 13:12 - 00000000 ____D C:\Users\kaloy\AppData\Local\ActiveSync
        2017-02-05 13:11 - 2017-02-05 13:11 - 00000000 ____D C:\Users\kaloy\AppData\Local\Publishers
        2017-02-05 13:10 - 2017-02-07 10:28 - 00000000 ____D C:\Users\kaloy\AppData\Local\Packages
        2017-02-05 13:10 - 2017-02-05 13:10 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Adobe
        2017-02-05 13:10 - 2017-02-05 13:10 - 00000000 ____D C:\Users\kaloy\AppData\Local\VirtualStore
        2017-02-05 13:10 - 2017-02-05 13:10 - 00000000 ____D C:\Users\kaloy\AppData\Local\TileDataLayer
        2017-02-05 13:06 - 2017-02-05 13:06 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
        2017-02-05 13:04 - 2017-02-05 13:04 - 00000000 ____D C:\WINDOWS\CSC
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-02-16 20:11 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
        2017-02-16 20:11 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
        2017-02-14 18:38 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
        2017-02-12 20:43 - 2016-04-27 09:08 - 00872882 _____ C:\WINDOWS\system32\PerfStringBackup.INI
        2017-02-12 20:37 - 2016-07-16 08:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
        2017-02-12 18:18 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
        2017-02-09 18:44 - 2016-04-27 09:12 - 00000000 __RHD C:\Users\Public\AccountPictures
        2017-02-08 20:13 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
        2017-02-06 23:40 - 2016-07-16 08:04 - 00008192 _____ C:\WINDOWS\system32\config\ELAM
        2017-02-06 13:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat
        2017-02-05 19:25 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
        2017-02-05 18:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
        2017-02-05 18:17 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
        2017-02-05 18:17 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration
        2017-02-05 18:17 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
        2017-02-05 18:13 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
        2017-02-05 18:10 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
        2017-02-05 18:09 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool
        2017-02-05 18:08 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
        2017-02-05 18:07 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
        2017-02-05 18:03 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
        2017-02-05 18:01 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
        2017-02-05 18:00 - 2016-07-16 13:49 - 00000000 ____D C:\WINDOWS\Setup
        2017-02-05 17:58 - 2016-07-17 00:18 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
        2017-02-05 17:58 - 2016-07-16 13:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\setup
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\bcastdvr
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
        2017-02-05 17:58 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
        2017-02-05 17:58 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
        2017-02-05 17:58 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\servicing
        2017-02-05 16:54 - 2015-10-30 09:24 - 00000167 _____ C:\WINDOWS\win.ini
        2017-02-05 15:16 - 2015-10-30 09:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
        2017-02-05 15:16 - 2015-10-30 09:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\wininit.exe => File is digitally signed
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-02-05 18:02
        ==================== End of FRST.txt ============================
        Addition.txt
         
      • от THGM_BG
        Когато използвам ctrl + v (paste) странни неща, които не съм копирал се намират в буфера, например: '06' '13' 'if 'of' etc.
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-02-2017 02
        Ran by Tsvetomir (administrator) on SEGOTEP (15-02-2017 22:36:07)
        Running from C:\Users\Tsvetomir\Desktop
        Loaded Profiles: Tsvetomir (Available Profiles: defaultuser0 & Tsvetomir)
        Platform: Windows 10 Pro Version 1607 (X64) Language: English (United States)
        Internet Explorer Version 11 (Default browser: FF)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (NVIDIA Corporation) C:\Users\Tsvetomir\AppData\Local\Temp\INS_9cf1fd3f.TMP
        (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
        () C:\Program Files (x86)\Windscribe\WindscribeService.exe
        (eVenture Limited) C:\Program Files (x86)\hide.me VPN\vpnsvc.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
        (Felix Logic) C:\Program Files (x86)\Cold Turkey\CTService.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamuseragent.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
        (Flux Software LLC) C:\Users\Tsvetomir\AppData\Local\FluxSoftware\Flux\flux.exe
        (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
        (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
        () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
        (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Office.Word_17.7766.47821.0_x64__8wekyb3d8bbwe\WordIm.exe
        (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
        (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        ==================== Registry (Whitelisted) ====================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
        HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
        HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
        HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
        HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
        HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
        HKLM-x32\...\Run: [QuickTime Task] => C:\Windows\SysWoW64\qttask.exe [28672 2016-10-27] ()
        HKU\S-1-5-21-1285248179-3755899748-101159353-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2062208 2016-05-26] (Sony)
        HKU\S-1-5-21-1285248179-3755899748-101159353-1001\...\Run: [AceStream] => C:\Users\Tsvetomir\AppData\Roaming\ACEStream\engine\ace_engine.exe [28024 2017-02-02] (Innovative Digital Technologies)
        HKU\S-1-5-21-1285248179-3755899748-101159353-1001\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [7647848 2016-07-24] ()
        HKU\S-1-5-21-1285248179-3755899748-101159353-1001\...\Run: [f.lux] => C:\Users\Tsvetomir\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
        HKU\S-1-5-21-1285248179-3755899748-101159353-1001\...\RunOnce: [Uninstall C:\Users\Tsvetomir\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Tsvetomir\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64"
        GroupPolicy: Restriction - Chrome <======= ATTENTION
        GroupPolicy\User: Restriction <======= ATTENTION
        CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{07ccd08a-efef-448d-87e2-a7dee3b776d9}: [DhcpNameServer] 10.111.166.1
        Tcpip\..\Interfaces\{942db14c-b776-49eb-952f-756de2940f7f}: [NameServer] 8.8.8.8,8.8.4.4
        Tcpip\..\Interfaces\{942db14c-b776-49eb-952f-756de2940f7f}: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{bfa38b88-db3b-47e9-b654-a50ad9ae185f}: [DhcpNameServer] 192.168.42.129
        Internet Explorer:
        ==================
        HKU\S-1-5-21-1285248179-3755899748-101159353-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
        BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
        BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
        FireFox:
        ========
        FF ProfilePath: C:\Users\Tsvetomir\AppData\Roaming\Mozilla\Firefox\Profiles\j79icouj.default-1485629442747 [2017-02-15]
        FF Homepage: Mozilla\Firefox\Profiles\j79icouj.default-1485629442747 -> about:newtab
        FF Extension: (ABV Notifier) - C:\Users\Tsvetomir\AppData\Roaming\Mozilla\Firefox\Profiles\j79icouj.default-1485629442747\Extensions\abvnotifier@netinfo.bg.xpi [2017-01-28]
        FF Extension: (Bulgarian Dictionary) - C:\Users\Tsvetomir\AppData\Roaming\Mozilla\Firefox\Profiles\j79icouj.default-1485629442747\Extensions\bg-BG@dictionaries.addons.mozilla.org [2017-02-09] [not signed]
        FF Extension: (Reddit Enhancement Suite) - C:\Users\Tsvetomir\AppData\Roaming\Mozilla\Firefox\Profiles\j79icouj.default-1485629442747\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2017-02-09]
        FF Extension: (uBlock Origin) - C:\Users\Tsvetomir\AppData\Roaming\Mozilla\Firefox\Profiles\j79icouj.default-1485629442747\Extensions\uBlock0@raymondhill.net.xpi [2017-01-28]
        FF Extension: (Stylish) - C:\Users\Tsvetomir\AppData\Roaming\Mozilla\Firefox\Profiles\j79icouj.default-1485629442747\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2017-02-01]
        FF HKU\S-1-5-21-1285248179-3755899748-101159353-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Tsvetomir\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
        FF Extension: (Ace Stream Web Extension) - C:\Users\Tsvetomir\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2017-01-31]
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-20] ()
        FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-20] ()
        FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
        FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
        FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
        FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
        FF Plugin-x32: @huawei.com/NPPlugin -> C:\Program Files (x86)\Web_TV\WebTVPlugin\NPPlugin.dll [2015-07-02] ()
        FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
        FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation)
        FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation)
        FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
        FF Plugin HKU\S-1-5-21-1285248179-3755899748-101159353-1001: @acestream.net/acestreamplugin,version=3.1.11 -> C:\Users\Tsvetomir\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-31] (Innovative Digital Technologies)
        Chrome:
        =======
        CHR HKU\S-1-5-21-1285248179-3755899748-101159353-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1465352 2017-01-13] ()
        R2 CTService; C:\Program Files (x86)\Cold Turkey\\CTService.exe [329728 2017-01-09] (Felix Logic) [File not signed]
        S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [387856 2016-11-29] (EasyAntiCheat Ltd)
        S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-19] (Microsoft Corporation) [File not signed]
        R2 hmevpnsvc; C:\Program Files (x86)\hide.me VPN\vpnsvc.exe [192208 2016-09-28] (eVenture Limited)
        R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
        R3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
        R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
        R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
        S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
        S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
        S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-09-06] (Microsoft Corporation)
        R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
        R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
        R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [47208 2016-07-24] ()
        R2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X]
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2016-10-16] (Sony Mobile Communications)
        S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
        R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2014-08-19] (Riverbed Technology, Inc.)
        R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_02838dee03d82b94\nvlddmkm.sys [14427064 2017-01-21] (NVIDIA Corporation)
        R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
        R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2017-01-20] (NVIDIA Corporation)
        R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
        R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
        R3 SensorsSimulatorDriver; C:\Windows\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
        S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
        R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
        R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-02-15 22:36 - 2017-02-15 22:36 - 00014651 _____ C:\Users\Tsvetomir\Desktop\FRST.txt
        2017-02-15 22:36 - 2017-02-15 22:36 - 00000000 ____D C:\FRST
        2017-02-15 22:35 - 2017-02-15 22:35 - 02422272 _____ (Farbar) C:\Users\Tsvetomir\Desktop\FRST64.exe
        2017-02-15 22:28 - 2017-02-15 22:28 - 00001410 _____ C:\Users\Tsvetomir\Desktop\Stellar Phoenix Windows Data Recovery.lnk
        2017-02-15 22:28 - 2017-02-15 22:28 - 00000000 _RSHD C:\ProgramData\Key-Base
        2017-02-15 22:28 - 2017-02-15 22:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Windows Data Recovery
        2017-02-15 22:28 - 2017-02-15 22:28 - 00000000 ____D C:\ProgramData\{3197A416-03BE-80D2-B483-C7D276163E36}
        2017-02-15 22:28 - 2017-02-15 22:28 - 00000000 ____D C:\Program Files (x86)\Stellar Phoenix Windows Data Recovery
        2017-02-15 22:25 - 2017-02-15 22:25 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\Thinstall
        2017-02-15 22:25 - 2017-02-15 22:25 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Thinstall
        2017-02-15 17:26 - 2017-02-15 17:26 - 00008746 _____ C:\Users\Tsvetomir\Desktop\New Microsoft Excel Worksheet.xlsx
        2017-02-15 01:21 - 2017-02-15 01:28 - 84270516 _____ C:\Users\Tsvetomir\Desktop\Mercedes-Benz C63 AMG Black Series for AC 1.11 by ZORROGSI and Beto FR.rar
        2017-02-14 18:50 - 2017-02-14 18:50 - 00000015 _____ C:\Users\Tsvetomir\Desktop\asd.txt
        2017-02-13 21:59 - 2017-02-13 21:59 - 00520440 _____ C:\Windows\system32\Drivers\EasyAntiCheat.sys
        2017-02-13 21:59 - 2017-02-13 21:59 - 00000000 ____D C:\Users\Tsvetomir\Documents\CPY_SAVES
        2017-02-13 21:59 - 2016-11-29 15:03 - 00387856 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
        2017-02-13 17:52 - 2017-02-13 17:52 - 00004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-13 17:52 - 2017-02-13 17:52 - 00001491 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
        2017-02-13 17:52 - 2017-02-13 17:52 - 00000000 ____D C:\Windows\LastGood
        2017-02-13 17:52 - 2017-01-20 20:39 - 00156608 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
        2017-02-13 17:52 - 2017-01-20 20:39 - 00124352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
        2017-02-13 17:52 - 2017-01-20 20:39 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
        2017-02-13 17:52 - 2017-01-20 15:36 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
        2017-02-12 21:38 - 2017-02-12 21:38 - 00003886 _____ C:\Windows\System32\Tasks\CTServiceInstaller
        2017-02-12 21:37 - 2017-02-12 21:37 - 00001118 _____ C:\Users\Public\Desktop\Cold Turkey.lnk
        2017-02-12 21:37 - 2017-02-12 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cold Turkey
        2017-02-12 21:37 - 2017-02-12 21:37 - 00000000 ____D C:\Program Files (x86)\Cold Turkey
        2017-02-12 17:30 - 2017-02-12 17:30 - 00000877 _____ C:\Users\Tsvetomir\Desktop\DiRT Rally.lnk
        2017-02-11 00:28 - 2017-02-11 00:31 - 00000000 ____D C:\Users\Tsvetomir\AppData\LocalLow\Daybreak Game Company
        2017-02-11 00:28 - 2017-02-11 00:28 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\SCE
        2017-02-11 00:28 - 2017-02-11 00:28 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Daybreak Game Company
        2017-02-10 20:52 - 2017-02-12 17:31 - 00000000 ____D C:\ProgramData\Codemasters
        2017-02-10 16:46 - 2017-02-15 13:23 - 00003134 _____ C:\Windows\System32\Tasks\MSIAfterburner
        2017-02-10 16:40 - 2017-02-13 20:37 - 00000000 ____D C:\Windows\SysWOW64\directx
        2017-02-10 16:40 - 2017-02-10 16:40 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
        2017-02-10 16:39 - 2017-02-14 00:06 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
        2017-02-10 16:39 - 2017-02-14 00:06 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
        2017-02-10 16:39 - 2017-02-10 16:39 - 00001161 _____ C:\Users\Tsvetomir\Desktop\MSI Afterburner.lnk
        2017-02-10 16:39 - 2017-02-10 16:39 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
        2017-02-10 16:11 - 2017-02-10 16:17 - 00000000 ____D C:\Users\Tsvetomir\Documents\Project CARS
        2017-02-10 16:11 - 2017-02-10 16:11 - 00000000 ____D C:\Users\Tsvetomir\Documents\wmd_symbol_cache
        2017-02-10 15:35 - 2017-02-13 17:52 - 00003884 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-10 15:35 - 2017-01-20 20:39 - 01872320 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
        2017-02-10 15:35 - 2017-01-20 20:39 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
        2017-02-10 15:35 - 2017-01-20 20:39 - 01464768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
        2017-02-10 15:35 - 2017-01-20 20:39 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
        2017-02-10 15:35 - 2017-01-20 20:39 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
        2017-02-10 15:34 - 2017-02-13 17:52 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-10 15:34 - 2017-02-13 17:52 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-10 15:34 - 2017-02-13 17:52 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-10 15:34 - 2017-02-13 17:52 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-10 15:34 - 2017-02-13 17:52 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-10 15:34 - 2017-02-10 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
        2017-02-10 15:34 - 2017-01-20 16:07 - 00134080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
        2017-02-10 15:33 - 2017-02-10 15:33 - 00000000 ____D C:\Program Files (x86)\VulkanRT
        2017-02-10 15:33 - 2017-01-20 18:38 - 00514616 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
        2017-02-10 15:33 - 2017-01-20 18:38 - 00420408 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
        2017-02-10 15:33 - 2017-01-20 17:13 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
        2017-02-10 15:33 - 2017-01-20 17:13 - 02479160 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
        2017-02-10 15:33 - 2017-01-20 17:13 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
        2017-02-10 15:33 - 2017-01-20 17:13 - 00548800 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
        2017-02-10 15:33 - 2017-01-20 17:13 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
        2017-02-10 15:33 - 2017-01-20 17:13 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
        2017-02-10 15:33 - 2017-01-20 17:13 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
        2017-02-10 15:33 - 2017-01-20 16:07 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
        2017-02-10 15:33 - 2017-01-18 14:57 - 07755067 _____ C:\Windows\system32\nvcoproc.bin
        2017-02-10 15:33 - 2016-12-16 02:33 - 00273696 _____ C:\Windows\SysWOW64\vulkan-1.dll
        2017-02-10 15:33 - 2016-12-16 02:33 - 00266528 _____ C:\Windows\system32\vulkan-1.dll
        2017-02-10 15:33 - 2016-12-16 02:33 - 00111392 _____ C:\Windows\SysWOW64\vulkaninfo.exe
        2017-02-10 15:33 - 2016-12-16 02:32 - 00125728 _____ C:\Windows\system32\vulkaninfo.exe
        2017-02-10 15:31 - 2017-01-24 02:00 - 01600056 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
        2017-02-10 15:31 - 2017-01-24 02:00 - 00217528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
        2017-02-10 15:31 - 2017-01-24 02:00 - 00047664 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
        2017-02-10 15:31 - 2017-01-20 20:39 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
        2017-02-10 15:31 - 2017-01-20 18:38 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 34974656 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 28239928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 19008576 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 14677272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 11123936 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 11019192 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 09308896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 08990584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 04079032 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 03597640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 03167288 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 02715072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437849.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 01591352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437849.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 01051584 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00988608 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00960568 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00946456 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00944224 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00909760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00721952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00719160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00618232 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00609216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00606776 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00573120 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00483384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00447800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
        2017-02-10 15:31 - 2017-01-20 18:38 - 00043556 _____ C:\Windows\system32\nvinfo.pb
        2017-02-10 15:31 - 2017-01-20 18:38 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
        2017-02-10 15:31 - 2017-01-20 18:38 - 00000669 _____ C:\Windows\system32\nv-vk64.json
        2017-02-10 15:31 - 2016-11-17 15:44 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\SETB174.tmp
        2017-02-10 15:16 - 2017-02-14 16:44 - 00000000 ____D C:\Users\Tsvetomir\Documents\Assetto Corsa
        2017-02-10 15:12 - 2017-02-10 15:34 - 00000000 ____D C:\Windows\LastGood.Tmp
        2017-02-09 22:48 - 2017-02-09 22:48 - 00000000 ____D C:\Users\Tsvetomir\Documents\OneNote Notebooks
        2017-02-09 22:31 - 2017-02-10 20:51 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
        2017-02-07 23:53 - 2017-02-08 00:35 - 00000000 ____D C:\Users\Tsvetomir\Documents\My Kindle Content
        2017-02-07 23:53 - 2017-02-07 23:53 - 00002318 _____ C:\Users\Tsvetomir\Desktop\Kindle.lnk
        2017-02-07 23:53 - 2017-02-07 23:53 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
        2017-02-07 23:53 - 2017-02-07 23:53 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Amazon
        2017-02-07 19:06 - 2017-02-12 21:02 - 00000000 ____D C:\ProgramData\Cold Turkey
        2017-02-07 14:39 - 2017-02-07 14:39 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed (2)
        2017-02-06 02:56 - 2017-02-13 15:17 - 00000281 _____ C:\Users\Tsvetomir\Desktop\Willpower.txt
        2017-02-05 19:28 - 2017-02-05 19:28 - 00000801 _____ C:\Users\Tsvetomir\Desktop\Videos.lnk
        2017-02-05 02:25 - 2016-10-30 21:55 - 01577189 _____ C:\Users\Tsvetomir\Desktop\ВТС.PDF
        2017-02-05 02:25 - 2016-02-10 17:56 - 01919600 _____ C:\Users\Tsvetomir\Desktop\Мислещят Човек.pdf
        2017-02-04 20:52 - 2017-02-04 20:52 - 00001354 _____ C:\Users\Tsvetomir\Desktop\ЖС.lnk
        2017-02-04 20:43 - 2017-02-04 20:33 - 00988476 _____ C:\Users\Tsvetomir\Desktop\!!!!!.pdf
        2017-01-28 21:50 - 2017-01-28 21:50 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Apps\2.0
        2017-01-28 20:49 - 2017-01-28 20:49 - 00000999 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
        2017-01-28 20:49 - 2017-01-28 20:49 - 00000000 ____D C:\Program Files\Mozilla Firefox
        2017-01-28 20:49 - 2017-01-28 20:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
        2017-01-26 11:38 - 2017-01-26 11:38 - 00001104 _____ C:\Users\Tsvetomir\Desktop\TeamViewer.lnk
        2017-01-25 19:53 - 2016-12-21 09:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
        2017-01-25 19:53 - 2016-12-21 06:44 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
        2017-01-25 17:32 - 2017-01-25 17:32 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
        2017-01-25 17:31 - 2017-02-10 02:44 - 00002677 _____ C:\Users\Tsvetomir\Desktop\Microsoft Word.lnk
        2017-01-25 16:57 - 2017-02-10 02:44 - 00002639 _____ C:\Users\Tsvetomir\Desktop\Microsoft Excel.lnk
        2017-01-25 16:57 - 2017-02-10 02:44 - 00002629 _____ C:\Users\Tsvetomir\Desktop\Microsoft PowerPoint.lnk
        2017-01-25 16:57 - 2017-02-10 02:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
        2017-01-25 16:56 - 2017-01-25 16:56 - 00000000 ____D C:\Windows\PCHEALTH
        2017-01-25 16:56 - 2017-01-25 16:56 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
        2017-01-25 16:56 - 2017-01-25 16:56 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
        2017-01-25 16:55 - 2017-01-25 16:55 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
        2017-01-25 16:55 - 2017-01-25 16:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
        2017-01-25 16:55 - 2017-01-25 16:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
        2017-01-21 21:34 - 2017-01-27 16:21 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\BetterDiscord
        2017-01-20 02:08 - 2017-01-20 02:08 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Macromedia
        2017-01-20 01:48 - 2017-02-15 19:51 - 00000000 ____D C:\Users\Tsvetomir\AppData\LocalLow\Mozilla
        2017-01-20 01:47 - 2017-01-20 01:54 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Mozilla
        2017-01-20 01:47 - 2017-01-20 01:48 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\Mozilla
        2017-01-18 17:57 - 2017-02-13 21:59 - 00000000 ____D C:\Users\Tsvetomir\Documents\My Games
        2017-01-18 03:16 - 2017-02-05 19:22 - 00000070 _____ C:\Users\Tsvetomir\Desktop\12.txt
        2017-01-16 19:13 - 2017-01-16 19:13 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\HD Tune Pro
        2017-01-16 19:13 - 2017-01-16 19:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro
        2017-01-16 19:13 - 2017-01-16 19:13 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-02-15 19:50 - 2016-10-15 21:50 - 00000000 ____D C:\Program Files (x86)\Steam
        2017-02-15 19:19 - 2016-10-28 19:02 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\CrashDumps
        2017-02-15 19:01 - 2016-10-15 21:21 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Packages
        2017-02-15 19:01 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
        2017-02-15 19:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
        2017-02-15 18:30 - 2016-10-15 21:06 - 00000000 ____D C:\Windows\system32\SleepStudy
        2017-02-15 13:53 - 2016-10-15 21:21 - 00000000 ____D C:\Users\Tsvetomir
        2017-02-15 13:25 - 2016-10-15 21:24 - 00000000 ____D C:\ProgramData\NVIDIA
        2017-02-13 21:02 - 2016-11-12 01:48 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\TeamViewer
        2017-02-13 19:03 - 2016-10-28 18:11 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\NVIDIA Corporation
        2017-02-13 17:55 - 2016-10-15 21:16 - 01364658 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-02-13 17:54 - 2016-10-15 23:09 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\NVIDIA
        2017-02-13 17:53 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
        2017-02-13 17:52 - 2016-12-17 21:22 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\NVIDIA
        2017-02-13 17:52 - 2016-10-15 21:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
        2017-02-13 17:52 - 2016-10-15 21:23 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
        2017-02-13 17:52 - 2016-10-15 21:23 - 00000000 ____D C:\Program Files\NVIDIA Corporation
        2017-02-13 01:59 - 2016-10-22 20:34 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\.ACEStream
        2017-02-12 21:34 - 2016-10-15 21:06 - 00000006 ____H C:\Windows\Tasks\SA.DAT
        2017-02-12 21:34 - 2016-07-16 08:04 - 00524288 _____ C:\Windows\system32\config\BBI
        2017-02-10 20:52 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
        2017-02-10 18:30 - 2017-01-11 13:46 - 00000000 ____D C:\Program Files\VS Revo Group
        2017-02-10 15:33 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Help
        2017-02-10 14:35 - 2016-10-15 21:06 - 00351592 _____ C:\Windows\system32\FNTCACHE.DAT
        2017-02-10 02:44 - 2016-11-30 13:24 - 00000000 ____D C:\Program Files\Microsoft Office
        2017-02-10 02:44 - 2016-10-28 17:28 - 00000000 ____D C:\Windows\ShellNew
        2017-02-08 17:02 - 2016-10-15 22:45 - 00000000 ____D C:\Users\Tsvetomir\Documents\Visual Studio 2015
        2017-02-07 14:53 - 2016-10-15 21:21 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\VirtualStore
        2017-02-04 21:00 - 2016-12-30 17:28 - 00000000 ____D C:\Users\Tsvetomir\Desktop\SS
        2017-02-03 22:24 - 2016-12-22 16:24 - 00000000 ____D C:\Users\Tsvetomir\AppData\Roaming\discord
        2017-01-28 21:23 - 2016-10-15 21:34 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Google
        2017-01-28 21:23 - 2016-10-15 21:34 - 00000000 ____D C:\Program Files (x86)\Google
        2017-01-28 20:44 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\LiveKernelReports
        2017-01-28 17:31 - 2017-01-08 02:18 - 00000776 _____ C:\Users\Tsvetomir\Desktop\All.lnk
        2017-01-28 02:56 - 2017-01-08 02:18 - 00000792 _____ C:\Users\Tsvetomir\Desktop\Books.lnk
        2017-01-26 16:45 - 2016-11-05 23:59 - 00000540 __RSH C:\ProgramData\ntuser.pol
        2017-01-26 00:06 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
        2017-01-25 17:02 - 2016-07-16 13:47 - 00000167 _____ C:\Windows\win.ini
        2017-01-25 17:02 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\System
        2017-01-25 16:56 - 2016-10-15 22:33 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
        2017-01-20 22:34 - 2016-10-26 16:29 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
        2017-01-20 02:08 - 2016-10-26 16:28 - 00000000 ____D C:\Users\Tsvetomir\AppData\Local\Adobe
        2017-01-20 02:07 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
        2017-01-20 02:07 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\Macromed
        ==================== Files in the root of some directories =======
        2016-10-16 10:46 - 2016-10-16 10:46 - 45700992 _____ (Sony) C:\Users\Tsvetomir\AppData\Local\pcc.exe
        2016-10-15 23:22 - 2016-10-15 23:22 - 0000017 _____ () C:\Users\Tsvetomir\AppData\Local\resmon.resmoncfg
        2016-10-16 11:40 - 2016-10-16 11:40 - 0000003 _____ () C:\Users\Tsvetomir\AppData\Local\updater.log
        2016-10-16 11:40 - 2016-10-16 11:40 - 0000424 _____ () C:\Users\Tsvetomir\AppData\Local\UserProducts.xml
        2016-12-22 15:26 - 2016-12-22 15:26 - 0000184 _____ () C:\Users\Tsvetomir\AppData\Local\uts.ini
        Some files in TEMP:
        ====================
        2017-02-15 22:34 - 2017-02-15 22:34 - 0000000 _____ () C:\Users\Tsvetomir\AppData\Local\Temp\1.1.17.0.exe
        2017-02-15 22:34 - 2017-02-15 22:34 - 0000000 _____ () C:\Users\Tsvetomir\AppData\Local\Temp\1.11.exe
        2017-02-15 22:34 - 2017-02-15 22:34 - 0000000 _____ () C:\Users\Tsvetomir\AppData\Local\Temp\1.exe
        2017-02-10 15:34 - 2016-11-17 15:44 - 1135552 _____ (NVIDIA Corporation) C:\Users\Tsvetomir\AppData\Local\Temp\NvTelemetry.dll
        2017-02-10 15:34 - 2016-11-17 15:44 - 0217024 _____ (NVIDIA Corporation) C:\Users\Tsvetomir\AppData\Local\Temp\NvTelemetryAPI32.dll
        2017-02-10 15:34 - 2016-11-17 15:44 - 0268736 _____ (NVIDIA Corporation) C:\Users\Tsvetomir\AppData\Local\Temp\NvTelemetryAPI64.dll
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-02-11 22:05
        ==================== End of FRST.txt ============================
        Addition.txt
      • от kaloyan.k219
        Здравейте, от скоро компютъра ми се държи странно. Примерно искам да изляза от някоя игра (с Windows бутона), но не става нищо... не реагира.. За да го направя задържам ctrl+alt+del и след това cancel... Понякога е много бавен.. имам чести проблеми с browser-a, защото примерно, ако гледам клипчета в youtube той забира (Google Chrome не отговаря).. докато писах темата (първо я писах в Chrome, после в Edge) имах проблеми - след като натисна добави темата не се случва нищо... Благодаря ви предварително..след като я написах имах проблеми със затварянето на browser-a (Edge)..
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-02-2017 01
        Ran by kaloy (administrator) on DESKTOP-KGGDGCH (12-02-2017 01:23:05)
        Running from C:\Users\kaloy\Desktop
        Loaded Profiles: kaloy (Available Profiles: kaloy)
        Platform: Windows 10 Pro Version 1607 (X64) Language: Български (България)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
        (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
        (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
        (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
        (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
        (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
        (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
        (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
        (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7903.40527.0_x64__8wekyb3d8bbwe\HxMail.exe
        (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7903.40527.0_x64__8wekyb3d8bbwe\HxTsr.exe
        (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
        (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.25.0_x64__8wekyb3d8bbwe\WinStore.App.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
        (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8844032 2016-01-27] (Realtek Semiconductor)
        HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2016-05-31] (Intel Corporation)
        HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
        HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
        HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-09] (AVAST Software)
        HKU\S-1-5-21-1066247772-3217912413-2287403915-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
        ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-09] (AVAST Software)
        ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-09] (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
        Tcpip\..\Interfaces\{f3a5ed2c-e4ab-4da0-9aa8-115b6da2172b}: [DhcpNameServer] 192.168.10.1 Internet Explorer:
        ==================
        BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
        BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
        BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
        BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation) FireFox:
        ========
        FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
        FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-02-05]
        FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
        FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-02-05]
        FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
        FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
        FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
        FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
        FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
        FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-05] (Google Inc.)
        FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-05] (Google Inc.) Chrome:
        =======
        CHR Profile: C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default [2017-02-12]
        CHR Extension: (Google Документи) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-05]
        CHR Extension: (Google Диск) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-05]
        CHR Extension: (YouTube) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-05]
        CHR Extension: (Avast SafePrice) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-02-06]
        CHR Extension: (Google Документи офлайн) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-05]
        CHR Extension: (Click&Clean) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2017-02-11]
        CHR Extension: (Avast Online Security) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-02-05]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-05]
        CHR Extension: (Click&Clean App) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-02-11]
        CHR Extension: (Gmail) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-05]
        CHR Extension: (Chrome Media Router) - C:\Users\kaloy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-05]
        CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-09] (AVAST Software s.r.o.)
        R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-09] (AVAST Software)
        R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17992 2016-05-31] (Intel Corporation)
        R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
        R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
        S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-11-17] (NVIDIA Corporation)
        R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
        R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-17] (NVIDIA Corporation)
        S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2017-02-05] (Microsoft Corporation)
        S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
        S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-09] (AVAST Software s.r.o.)
        R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-09] (AVAST Software s.r.o.)
        R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-09] (AVAST Software s.r.o.)
        R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-09] (AVAST Software s.r.o.)
        S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-09] (AVAST Software)
        R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-09] (AVAST Software)
        R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-09] (AVAST Software)
        R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-09] (AVAST Software)
        R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-09] (AVAST Software)
        R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-09] (AVAST Software)
        R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-09] (AVAST Software)
        R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-09] (AVAST Software)
        R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-09] (AVAST Software)
        R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2017-01-20] ()
        R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176584 2017-02-08] (Malwarebytes)
        R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [110536 2017-02-09] (Malwarebytes)
        R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-02-09] (Malwarebytes)
        R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [251848 2017-02-09] (Malwarebytes)
        R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-02-12] (Malwarebytes)
        S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
        R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
        S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-17] (NVIDIA Corporation)
        R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-17] (NVIDIA Corporation)
        R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-10-10] (Realtek                                            )
        S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
        S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
        S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-02-12 01:23 - 2017-02-12 01:23 - 00015025 _____ C:\Users\kaloy\Desktop\FRST.txt
        2017-02-12 01:22 - 2017-02-12 01:23 - 00000000 ____D C:\FRST
        2017-02-12 01:21 - 2017-02-12 01:22 - 02421248 _____ (Farbar) C:\Users\kaloy\Desktop\FRST64.exe
        2017-02-12 01:17 - 2017-02-12 01:17 - 00000222 _____ C:\Users\kaloy\Desktop\Grand Theft Auto V.url
        2017-02-12 01:17 - 2017-02-12 01:17 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
        2017-02-12 00:29 - 2017-02-12 00:29 - 00000000 ____D C:\Users\kaloy\AppData\Local\Steam
        2017-02-12 00:24 - 2017-02-12 01:10 - 00000000 ____D C:\Program Files (x86)\Steam
        2017-02-12 00:24 - 2017-02-12 00:24 - 01446792 _____ C:\Users\kaloy\Downloads\SteamSetup.exe
        2017-02-12 00:24 - 2017-02-12 00:24 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk
        2017-02-12 00:24 - 2017-02-12 00:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
        2017-02-11 12:21 - 2017-02-11 12:21 - 00000000 ___HD C:\OneDriveTemp
        2017-02-10 21:24 - 2017-02-10 21:24 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Design Science
        2017-02-10 21:23 - 2017-02-10 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6
        2017-02-10 21:23 - 2017-02-10 21:23 - 00000000 ____D C:\Program Files (x86)\MathType
        2017-02-10 21:18 - 2017-02-10 21:23 - 10416632 _____ (Design Science, Inc.) C:\Users\kaloy\Downloads\InstallMTW6.9b.exe
        2017-02-10 19:51 - 2017-02-10 19:51 - 00000246 _____ C:\Users\kaloy\Downloads\Card Numbers.txt
        2017-02-10 15:30 - 2017-02-10 15:31 - 00000000 ____D C:\Users\kaloy\Desktop\MCLeaks
        2017-02-09 18:59 - 2017-02-09 18:59 - 00000000 ____D C:\Users\kaloy\AppData\Local\AVAST Software
        2017-02-09 18:51 - 2017-02-09 18:51 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
        2017-02-09 18:49 - 2017-02-09 18:49 - 00000000 ____D C:\WINDOWS\pss
        2017-02-09 16:19 - 2017-02-09 16:19 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
        2017-02-09 16:19 - 2017-02-09 16:19 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
        2017-02-09 16:19 - 2017-02-09 16:18 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
        2017-02-09 16:19 - 2017-02-09 16:18 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
        2017-02-09 16:19 - 2017-02-09 16:18 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
        2017-02-09 16:19 - 2017-02-09 16:18 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
        2017-02-08 20:12 - 2017-02-08 20:12 - 00000000 ____D C:\Program Files (x86)\VulkanRT
        2017-02-08 20:12 - 2017-01-04 15:24 - 00222648 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
        2017-02-08 20:12 - 2016-12-29 14:43 - 00133056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
        2017-02-08 20:12 - 2016-09-09 20:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
        2017-02-08 20:12 - 2016-09-09 20:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
        2017-02-08 20:12 - 2016-09-09 20:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
        2017-02-08 20:12 - 2016-09-09 20:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
        2017-02-07 17:36 - 2017-02-07 17:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
        2017-02-06 19:29 - 2017-02-11 23:09 - 00000000 ____D C:\Users\kaloy\AppData\Local\MicrosoftEdge
        2017-02-06 16:37 - 2017-02-06 16:37 - 00000000 ____D C:\Users\kaloy\.ssh
        2017-02-06 13:15 - 2016-12-21 09:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
        2017-02-06 13:15 - 2016-12-21 06:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
        2017-02-05 19:26 - 2017-02-12 00:01 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
        2017-02-05 19:26 - 2017-02-09 18:56 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
        2017-02-05 19:26 - 2017-02-09 18:56 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
        2017-02-05 19:26 - 2017-02-09 18:56 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
        2017-02-05 19:26 - 2017-02-08 21:50 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
        2017-02-05 19:26 - 2017-02-05 19:26 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
        2017-02-05 19:26 - 2017-02-05 19:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
        2017-02-05 19:26 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
        2017-02-05 19:25 - 2017-02-05 19:25 - 00000000 ____D C:\ProgramData\USOShared
        2017-02-05 18:36 - 2017-02-05 18:36 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\WinRAR
        2017-02-05 18:35 - 2017-02-05 18:35 - 00001599 _____ C:\Users\kaloy\Desktop\Minecraft.lnk
        2017-02-05 18:35 - 2017-02-05 18:35 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\NVIDIA
        2017-02-05 18:33 - 2017-02-05 18:33 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\java
        2017-02-05 18:30 - 2017-02-12 00:51 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\.minecraft
        2017-02-05 18:29 - 2017-02-09 19:25 - 00000000 ____D C:\Program Files (x86)\Minecraft
        2017-02-05 18:29 - 2017-02-05 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
        2017-02-05 18:22 - 2017-02-05 18:22 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
        2017-02-05 18:20 - 2017-02-05 18:20 - 00000000 ____D C:\Users\kaloy\AppData\Local\PackageStaging
        2017-02-05 18:19 - 2017-02-06 13:19 - 00000000 ____D C:\Users\kaloy\AppData\Local\ConnectedDevicesPlatform
        2017-02-05 18:19 - 2017-02-05 18:19 - 00000020 ___SH C:\Users\kaloy\ntuser.ini
        2017-02-05 18:17 - 2017-02-09 18:56 - 00004038 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1486309004
        2017-02-05 18:17 - 2017-02-09 18:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
        2017-02-05 18:17 - 2017-02-05 18:17 - 00007623 _____ C:\WINDOWS\diagwrn.xml
        2017-02-05 18:17 - 2017-02-05 18:17 - 00007623 _____ C:\WINDOWS\diagerr.xml
        2017-02-05 18:17 - 2017-02-05 18:17 - 00003142 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00003114 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002962 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002942 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002852 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002810 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
        2017-02-05 18:17 - 2017-02-05 18:17 - 00002772 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
        2017-02-05 18:17 - 2017-02-05 18:17 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
        2017-02-05 18:16 - 2017-02-05 18:17 - 00003444 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
        2017-02-05 18:16 - 2017-02-05 18:17 - 00003220 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
        2017-02-05 18:16 - 2017-02-05 18:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
        2017-02-05 18:13 - 2017-02-05 18:13 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
        2017-02-05 18:10 - 2017-02-05 18:10 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
        2017-02-05 18:08 - 2017-02-05 18:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
        2017-02-05 18:07 - 2017-02-11 12:37 - 00000000 ____D C:\Users\kaloy
        2017-02-05 18:05 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
        2017-02-05 18:04 - 2017-02-05 18:04 - 00000000 ____H C:\ProgramData\DP45977C.lfl
        2017-02-05 18:04 - 2017-02-05 18:04 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
        2017-02-05 18:04 - 2017-02-05 18:04 - 00000000 ____D C:\Program Files\Realtek
        2017-02-05 18:04 - 2016-12-29 14:44 - 06386232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 02477624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
        2017-02-05 18:04 - 2016-12-29 14:44 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
        2017-02-05 18:04 - 2016-12-19 09:26 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin
        2017-02-05 18:03 - 2017-02-11 18:39 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
        2017-02-05 18:03 - 2017-02-05 18:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation
        2017-02-05 18:03 - 2017-02-05 18:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
        2017-02-05 18:03 - 2017-02-05 18:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
        2017-02-05 18:02 - 2017-02-11 22:59 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
        2017-02-05 18:02 - 2017-02-09 18:50 - 00337864 _____ C:\WINDOWS\system32\FNTCACHE.DAT
        2017-02-05 18:01 - 2017-02-05 18:18 - 00000000 ___DC C:\WINDOWS\Panther
        2017-02-05 17:59 - 2017-02-05 17:59 - 00000000 ____D C:\Windows.old
        2017-02-05 17:57 - 2017-02-05 17:57 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
        2017-02-05 17:57 - 2017-02-05 17:57 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
        2017-02-05 17:57 - 2017-02-05 17:57 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
        2017-02-05 17:57 - 2017-02-05 17:57 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
        2017-02-05 17:57 - 2017-02-05 17:57 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
        2017-02-05 17:57 - 2017-02-05 17:57 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml
        2017-02-05 17:57 - 2017-02-05 17:57 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
        2017-02-05 17:57 - 2017-02-05 17:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
        2017-02-05 17:57 - 2017-02-05 17:57 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveprompt.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\baaupdate.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
        2017-02-05 17:57 - 2017-02-05 17:57 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
        2017-02-05 17:57 - 2017-02-05 17:57 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
        2017-02-05 17:57 - 2017-02-05 17:57 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
        2017-02-05 17:57 - 2017-02-05 17:57 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
        2017-02-05 17:57 - 2017-02-05 17:57 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 02169184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01669984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01400160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
        2017-02-05 17:56 - 2017-02-05 17:56 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01054048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
        2017-02-05 17:56 - 2017-02-05 17:56 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00992096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
        2017-02-05 17:56 - 2017-02-05 17:56 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00822624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00813408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls
        2017-02-05 17:56 - 2017-02-05 17:56 - 00788624 _____ C:\WINDOWS\system32\locale.nls
        2017-02-05 17:56 - 2017-02-05 17:56 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00779616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00752992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00571744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
        2017-02-05 17:56 - 2017-02-05 17:56 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00513376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00406368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
        2017-02-05 17:56 - 2017-02-05 17:56 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
        2017-02-05 17:56 - 2017-02-05 17:56 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\tspubwmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00190816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
        2017-02-05 17:56 - 2017-02-05 17:56 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00127328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppVStrm.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
        2017-02-05 17:56 - 2017-02-05 17:56 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
        2017-02-05 17:56 - 2017-02-05 17:56 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
        2017-02-05 17:56 - 2017-02-05 17:56 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
        2017-02-05 17:56 - 2017-02-05 17:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
        2017-02-05 17:56 - 2017-02-05 17:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
        2017-02-05 17:46 - 2017-02-05 18:02 - 00000000 ____D C:\WINDOWS\ServiceProfiles
        2017-02-05 17:46 - 2017-02-05 17:46 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
        2017-02-05 17:45 - 2017-02-05 17:45 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
        2017-02-05 17:45 - 2017-02-05 17:45 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
        2017-02-05 17:36 - 2017-02-09 18:56 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
        2017-02-05 17:36 - 2017-02-09 16:19 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
        2017-02-05 17:36 - 2017-02-05 17:36 - 00001088 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
        2017-02-05 17:36 - 2017-02-05 17:36 - 00000000 ____D C:\Users\kaloy\AppData\Local\CEF
        2017-02-05 17:35 - 2017-02-09 16:19 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
        2017-02-05 17:35 - 2017-02-09 16:19 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
        2017-02-05 17:35 - 2017-02-05 19:25 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
        2017-02-05 17:35 - 2017-02-05 19:25 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
        2017-02-05 17:35 - 2017-02-05 17:35 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\AVAST Software
        2017-02-05 17:35 - 2017-02-05 17:35 - 00000000 ____D C:\Program Files\Common Files\AV
        2017-02-05 17:35 - 2017-02-05 17:34 - 00969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys.148630892298407
        2017-02-05 17:35 - 2017-02-05 17:34 - 00513496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.148630892520310
        2017-02-05 17:35 - 2017-02-05 17:34 - 00292704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148630892668712
        2017-02-05 17:34 - 2017-02-05 17:37 - 00000000 ____D C:\AdwCleaner
        2017-02-05 17:34 - 2017-02-05 17:36 - 00000000 ____D C:\ProgramData\AVAST Software
        2017-02-05 17:34 - 2017-02-05 17:36 - 00000000 ____D C:\Program Files\AVAST Software
        2017-02-05 17:34 - 2017-02-05 17:34 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
        2017-02-05 17:33 - 2017-02-06 14:15 - 00000000 ____D C:\Users\kaloy\AppData\Local\Google
        2017-02-05 17:33 - 2017-02-05 18:21 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-02-05 17:33 - 2017-02-05 18:21 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
        2017-02-05 17:33 - 2017-02-05 18:10 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-02-05 17:33 - 2017-02-05 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-02-05 17:33 - 2017-02-05 17:33 - 00000000 ____D C:\Program Files\WinRAR
        2017-02-05 17:33 - 2017-02-05 17:33 - 00000000 ____D C:\Program Files (x86)\Google
        2017-02-05 17:29 - 2017-02-05 19:26 - 00000000 ____D C:\ProgramData\Malwarebytes
        2017-02-05 17:29 - 2017-02-05 17:29 - 00000000 ____D C:\WINDOWS\system32\Drivers\etc\BACKUP
        2017-02-05 17:29 - 2017-02-05 17:29 - 00000000 ____D C:\Program Files\Malwarebytes
        2017-02-05 17:08 - 2017-02-05 17:21 - 00000000 ___HD C:\$WINDOWS.~BT
        2017-02-05 17:07 - 2017-02-05 17:08 - 00000036 _____ C:\WINDOWS\progress.ini
        2017-02-05 16:52 - 2017-02-05 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
        2017-02-05 16:52 - 2017-02-05 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
        2017-02-05 16:52 - 2017-02-05 16:52 - 00000000 ____D C:\Program Files (x86)\MSBuild
        2017-02-05 16:52 - 2017-02-05 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
        2017-02-05 16:51 - 2017-02-05 18:10 - 00000000 ____D C:\WINDOWS\SHELLNEW
        2017-02-05 16:51 - 2017-02-05 16:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 __RHD C:\MSOCache
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Users\kaloy\AppData\Local\Microsoft Help
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Program Files\Microsoft Office
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
        2017-02-05 16:51 - 2017-02-05 16:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
        2017-02-05 16:49 - 2017-02-05 16:51 - 00000000 ____D C:\Users\kaloy\AppData\Local\MSfree Inc
        2017-02-05 16:49 - 2017-02-05 16:49 - 00000000 ____D C:\Users\kaloy\AppData\Local\PeerDistRepub
        2017-02-05 16:19 - 2017-02-05 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
        2017-02-05 16:19 - 2017-02-05 18:08 - 00000000 ____D C:\WINDOWS\system32\BestPractices
        2017-02-05 16:16 - 2017-02-11 18:41 - 00000000 ____D C:\Users\kaloy\AppData\Local\NVIDIA Corporation
        2017-02-05 16:16 - 2017-02-11 18:39 - 00000000 ____D C:\Users\kaloy\AppData\Local\NVIDIA
        2017-02-05 16:16 - 2017-02-05 16:16 - 00001489 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
        2017-02-05 16:15 - 2017-02-08 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
        2017-02-05 16:15 - 2016-11-17 15:44 - 01854400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 01755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 01452480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 01317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
        2017-02-05 16:15 - 2016-11-17 15:44 - 00120256 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
        2017-02-05 16:15 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
        2017-02-05 16:14 - 2016-12-29 15:06 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
        2017-02-05 16:13 - 2017-01-04 15:19 - 01604160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
        2017-02-05 16:13 - 2017-01-04 15:19 - 00221640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
        2017-02-05 16:13 - 2017-01-04 15:02 - 03977632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
        2017-02-05 16:13 - 2017-01-04 10:07 - 00042286 _____ C:\WINDOWS\system32\nvinfo.pb
        2017-02-05 16:13 - 2016-12-01 22:02 - 01951680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437619.dll
        2017-02-05 16:13 - 2016-12-01 22:02 - 01586744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437619.dll
        2017-02-05 16:13 - 2016-12-01 22:02 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
        2017-02-05 16:13 - 2016-12-01 22:02 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json
        2017-02-05 16:13 - 2016-11-17 15:44 - 00101824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
        2017-02-05 16:13 - 2016-11-17 15:44 - 00091584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
        2017-02-05 16:13 - 2016-11-17 15:44 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
        2017-02-05 16:11 - 2017-02-05 16:11 - 00000000 ____D C:\NVIDIA
        2017-02-05 16:11 - 2017-02-05 16:11 - 00000000 ____D C:\Intel
        2017-02-05 16:10 - 2015-10-10 07:27 - 00935168 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
        2017-02-05 16:10 - 2015-10-10 07:27 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
        2017-02-05 16:09 - 2017-02-05 18:14 - 00846312 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
        2017-02-05 16:09 - 2017-02-05 18:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
        2017-02-05 16:09 - 2017-02-05 16:13 - 00000000 ____D C:\ProgramData\Package Cache
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\Users\kaloy\Intel
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Intel Corporation
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\ProgramData\Intel
        2017-02-05 16:09 - 2017-02-05 16:09 - 00000000 ____D C:\Program Files\Intel
        2017-02-05 16:08 - 2017-02-05 16:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
        2017-02-05 16:08 - 2017-02-05 16:10 - 00000000 ____D C:\Program Files (x86)\Realtek
        2017-02-05 16:08 - 2016-01-27 10:04 - 03195648 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
        2017-02-05 16:08 - 2016-01-27 10:04 - 02894976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
        2017-02-05 16:08 - 2016-01-27 10:03 - 72203792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
        2017-02-05 16:08 - 2016-01-27 10:03 - 07172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 04779776 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
        2017-02-05 16:08 - 2016-01-27 10:03 - 03769493 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
        2017-02-05 16:08 - 2016-01-27 10:03 - 03283248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 03080784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 02036992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 01356504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00447728 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00445408 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00192992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00084616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
        2017-02-05 16:08 - 2016-01-27 10:03 - 00023704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
        2017-02-05 16:07 - 2017-02-05 16:08 - 00000000 ___HD C:\Program Files (x86)\Temp
        2017-02-05 16:07 - 2016-01-06 16:23 - 02826832 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
        2017-02-05 15:53 - 2017-02-05 15:53 - 00000000 ____D C:\WINDOWS\system32\MRT
        2017-02-05 15:52 - 2017-02-05 15:53 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
        2017-02-05 15:49 - 2016-07-01 05:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
        2017-02-05 15:47 - 2016-07-01 05:57 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
        2017-02-05 15:19 - 2016-10-28 03:22 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
        2017-02-05 13:14 - 2017-02-05 13:14 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Skype
        2017-02-05 13:13 - 2017-02-11 18:39 - 00000000 ____D C:\ProgramData\NVIDIA
        2017-02-05 13:13 - 2017-02-11 15:35 - 00000000 ____D C:\Users\kaloy\AppData\Local\Comms
        2017-02-05 13:13 - 2017-02-11 12:21 - 00000000 ___RD C:\Users\kaloy\OneDrive
        2017-02-05 13:13 - 2017-02-05 18:23 - 00002395 _____ C:\Users\kaloy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
        2017-02-05 13:13 - 2017-02-05 18:18 - 00000000 ___HD C:\$GetCurrent
        2017-02-05 13:12 - 2017-02-05 18:19 - 00000000 ____D C:\Windows10Upgrade
        2017-02-05 13:12 - 2017-02-05 13:12 - 00000811 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Помощник за надстройка на Windows 10.lnk
        2017-02-05 13:12 - 2017-02-05 13:12 - 00000799 _____ C:\Users\kaloy\Desktop\Помощник за надстройка на Windows 10.lnk
        2017-02-05 13:12 - 2017-02-05 13:12 - 00000000 ____D C:\Users\kaloy\AppData\Local\ActiveSync
        2017-02-05 13:11 - 2017-02-05 13:11 - 00000000 ____D C:\Users\kaloy\AppData\Local\Publishers
        2017-02-05 13:10 - 2017-02-07 10:28 - 00000000 ____D C:\Users\kaloy\AppData\Local\Packages
        2017-02-05 13:10 - 2017-02-05 13:10 - 00000000 ____D C:\Users\kaloy\AppData\Roaming\Adobe
        2017-02-05 13:10 - 2017-02-05 13:10 - 00000000 ____D C:\Users\kaloy\AppData\Local\VirtualStore
        2017-02-05 13:10 - 2017-02-05 13:10 - 00000000 ____D C:\Users\kaloy\AppData\Local\TileDataLayer
        2017-02-05 13:06 - 2017-02-05 13:06 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
        2017-02-05 13:04 - 2017-02-05 13:04 - 00000000 ____D C:\WINDOWS\CSC ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-02-12 00:49 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
        2017-02-11 18:37 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
        2017-02-10 15:10 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
        2017-02-09 19:01 - 2016-04-27 09:08 - 00864570 _____ C:\WINDOWS\system32\PerfStringBackup.INI
        2017-02-09 18:54 - 2016-07-16 08:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
        2017-02-09 18:44 - 2016-04-27 09:12 - 00000000 __RHD C:\Users\Public\AccountPictures
        2017-02-08 20:13 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
        2017-02-06 23:40 - 2016-07-16 08:04 - 00008192 _____ C:\WINDOWS\system32\config\ELAM
        2017-02-06 13:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat
        2017-02-06 13:11 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
        2017-02-05 19:25 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
        2017-02-05 18:18 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
        2017-02-05 18:17 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
        2017-02-05 18:17 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration
        2017-02-05 18:17 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
        2017-02-05 18:13 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
        2017-02-05 18:10 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
        2017-02-05 18:09 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool
        2017-02-05 18:08 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
        2017-02-05 18:07 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
        2017-02-05 18:04 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
        2017-02-05 18:03 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
        2017-02-05 18:01 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
        2017-02-05 18:00 - 2016-07-16 13:49 - 00000000 ____D C:\WINDOWS\Setup
        2017-02-05 17:58 - 2016-07-17 00:18 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
        2017-02-05 17:58 - 2016-07-16 13:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\setup
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\bcastdvr
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
        2017-02-05 17:58 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
        2017-02-05 17:58 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
        2017-02-05 17:58 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
        2017-02-05 17:58 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\servicing
        2017-02-05 16:54 - 2015-10-30 09:24 - 00000167 _____ C:\WINDOWS\win.ini
        2017-02-05 15:16 - 2015-10-30 09:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
        2017-02-05 15:16 - 2015-10-30 09:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll ==================== Files in the root of some directories ======= 2017-02-05 18:04 - 2017-02-05 18:04 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed
        C:\WINDOWS\system32\wininit.exe => File is digitally signed
        C:\WINDOWS\explorer.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
        C:\WINDOWS\system32\svchost.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
        C:\WINDOWS\system32\services.exe => File is digitally signed
        C:\WINDOWS\system32\User32.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
        C:\WINDOWS\system32\userinit.exe => File is digitally signed
        C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
        C:\WINDOWS\system32\rpcss.dll => File is digitally signed
        C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
        C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
        C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-02-05 18:02 ==================== End of FRST.txt ============================   Addition.txt
    • Разглеждащи в момента   0 потребители

      Няма регистрирани потребители разглеждащи тази страница.

    • Дарение